Skip to content

fix(deps): update module github.com/sigstore/rekor to v1.3.6#2362

Closed
renovate[bot] wants to merge 1 commit intomainfrom
renovate/github.com-sigstore-rekor-1.x
Closed

fix(deps): update module github.com/sigstore/rekor to v1.3.6#2362
renovate[bot] wants to merge 1 commit intomainfrom
renovate/github.com-sigstore-rekor-1.x

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate bot commented Apr 2, 2024

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
github.com/sigstore/rekor v1.2.2 -> v1.3.6 age adoption passing confidence

Release Notes

sigstore/rekor (github.com/sigstore/rekor)

v1.3.6

Compare Source

New Features

  • Add support for IEEE P1363 encoded ECDSA signatures
  • Add index performance script (#​2042)
  • Add support for ed25519ph user keys in hashedrekord (#​1945)
  • Add metrics for index insertion (#​2015)
  • Add TLS support for Redis Client implementation (#​1998)

Bug Fixes

  • fix typo in remoteIp and set full name for trace field

Contributors

  • Bob Callaway
  • Colleen Murphy
  • cpanato
  • Hayden B
  • Mihkel Pärna
  • Riccardo Schirone

v1.3.5

Compare Source

New Features

  • output trace in slog and override correlation header name (#​1986)
  • give log timestamps nanosecond precision (#​1985)
  • Added support for sha384/sha512 hash algorithms in hashedrekords (#​1959)
  • Change Redis value for locking mechanism (#​1957)

Bug Fixes

  • Fix panic for DSSE canonicalization (#​1923)
  • Drop conditional when verifying entry checkpoint (#​1917)
  • Remove timestamp from checkpoint (#​1888)
  • Additional unique index correction (#​1885)

Quality Enhancements

  • bump trillian images to v1.6.0 (#​1984)
  • remove trillian images from release process (#​1983)
  • update builder to use go1.21

Contributors

  • Andrew Block
  • Bob Callaway
  • Carlos Tadeu Panato Junior
  • Hayden Blauzvern
  • Riccardo Schirone

v1.3.4

Compare Source

New Features

  • add mysql indexstorage backend
  • add s3 storage for attestations

Bug Fixes

  • fix: Do not check for pubsub.topics.get on initialization (#​1853)
  • fix optional field in cose schema

Quality Enhancements

  • Update ranges.go (#​1852)
  • update indexstorage interface to reduce roundtrips (#​1838)
  • use a single validator library in rekor-cli (#​1818)
  • Remove go-playground/validator dependency from pkg/pki (#​1817)

Contributors

  • Bob Callaway
  • Carlos Tadeu Panato Junior
  • Hayden B
  • James Alseth
  • Kenny Leung
  • Noah Kreiger
  • Zach Steindler

v1.3.3

Compare Source

New Features

  • update trillian to 1.5.3 (#​1803)
  • adds redis_auth (#​1627)
  • Add method to get artifact hash for an entry (#​1777)

Bug Fixes

  • Update signer flag description (#​1804)
  • install go at correct version for codeql (#​1762)

Quality Enhancements

  • make e2e tests more usable with docker-compose (#​1770)

Contributors

  • Bob Callaway
  • Carlos Tadeu Panato Junior
  • Hayden B
  • ian hundere
  • Kenny Leung

v1.3.2

Compare Source

Bug Fixes

  • build(deps): Bump golang.org/x/net from 0.16.0 to 0.17.0 (#​1753)
  • build(deps): Bump github.com/google/go-cmp from 0.5.9 to 0.6.0 (#​1755)
  • build(deps): Bump google/cloud-sdk from 449.0.0 to 450.0.0 (#​1757)
  • build(deps): Bump google.golang.org/grpc from 1.58.2 to 1.58.3 (#​1754)
  • update Dockerfile for go 1.21.3 (#​1752)
  • update builder image to use go1.21.3 (#​1751)

Contributors

  • Carlos Tadeu Panato Junior

v1.3.1

Compare Source

New Features

  • enable GCP cloud profiling on rekor-server (#​1746)
  • move index storage into interface (#​1741)
  • add info to readme to denote additional documentation sources (#​1722)
  • Add type of ed25519 key for TUF (#​1677)
  • Allow parsing base64-encoded TUF metadata and root content (#​1671)

Quality Enhancements

  • disable quota in trillian in test harness (#​1680)

Bug Fixes

  • Update contact for code of conduct (#​1720)
  • fix: typo (#​1711)
  • Fix panic when parsing SSH SK pubkeys (#​1712)
  • Correct index creation (#​1708)
  • Update .ko.yaml (#​1682)
  • docs: fixzes a small typo on the readme (#​1686)
  • chore: fix backfill-redis Makefile target (#​1685)

Contributors

  • Andres Galante
  • Andrew Block
  • Appu
  • Bob Callaway
  • Carlos Tadeu Panato Junior
  • guangwu
  • Hayden B
  • jonvnadelberg
  • Lance Ball

v1.3.0

Compare Source

New Features

  • feat: Support publishing new log entries to Pub/Sub topics (#​1580)
  • Change values of Identity.Raw, add fingerprints (#​1628)
  • Extract all subjects from SANs for x509 verifier (#​1632)
  • Fix type comment for Identity struct (#​1619)
  • Refactor Identities API (#​1611)
  • Refactor Verifiers to return multiple keys (#​1601)

Quality Enhancements

Bug Fixes

  • Update openapi.yaml (#​1655)
  • pass transient errors through retrieveLogEntry (#​1653)
  • return full entryID on HTTP 409 responses (#​1650)
  • Update checkpoint link (#​1597)
  • Use correct log index in inclusion proof (#​1599)
  • remove instrumentation library (#​1595)
  • pki: clean up fuzzer (#​1594)
  • alpine: add max metadata size to fuzzer (#​1571)

Contributors

  • AdamKorcz
  • Appu
  • Bob Callaway
  • Carlos Tadeu Panato Junior
  • Ceridwen Coghlan
  • Hayden B
  • James Alseth

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

@renovate renovate bot added the dependencies Pull requests that update a dependency file label Apr 2, 2024
@renovate
fix(deps): update module github.com/sigstore/rekor to v1.3.6
f92be0f 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate renovate bot force-pushed the renovate/github.com-sigstore-rekor-1.x branch from 68c1729 to f92be0f Compare April 2, 2024 17:02
@mtrmac
Copy link
Copy Markdown
Collaborator

mtrmac commented Apr 2, 2024

Compared to 1.3.5, this does not change any code called by Skopeo, and we don’t yet want to update to Go 1.21. See #2292 and earlier PRs for more of the history.

@mtrmac mtrmac closed this Apr 2, 2024
@renovate
Copy link
Copy Markdown
Contributor Author

renovate bot commented Apr 2, 2024

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update (v1.3.6). You will get a PR once a newer version is released. To ignore this dependency forever, add it to the ignoreDeps array of your Renovate config.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.

@renovate renovate bot deleted the renovate/github.com-sigstore-rekor-1.x branch April 2, 2024 19:32
@mtrmac mtrmac mentioned this pull request Apr 15, 2024
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@mtrmac