Skip to content

Update module github.com/sigstore/sigstore to v1.10.4#480

Merged
mtrmac merged 1 commit into
mainfrom
renovate/github.com-sigstore-sigstore-1.x
Mar 13, 2026
Merged

Update module github.com/sigstore/sigstore to v1.10.4#480
mtrmac merged 1 commit into
mainfrom
renovate/github.com-sigstore-sigstore-1.x

Conversation

@renovate

@renovate renovate Bot commented Nov 19, 2025

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
github.com/sigstore/sigstore v1.9.6-0.20251111174640-d8ab8afb1326v1.10.4 age confidence

Release Notes

sigstore/sigstore (github.com/sigstore/sigstore)

v1.10.4

Compare Source

What's Changed

Full Changelog: sigstore/sigstore@v1.10.3...v1.10.4

v1.10.3

Compare Source

What's Changed

v1.10.3 adds ValidatePubKey back to the cryptoutils package to avoid a breaking API change.

  • Add back ValidatePubKey as a deprecated, minimal function in #​2235

Full Changelog: sigstore/sigstore@v1.10.2...v1.10.3

v1.10.2

v1.10.2

Functionally equivalent to v1.10.0. v1.10.1 has been retracted to remove copied code.

v1.10.0
Breaking change

#​2194 moves cryptoutils.ValidatePubKey to goodkey.ValidatePubKey to minimize the dependency tree for clients using the cryptoutils package.

Features
  • feat(hashivault): token helper in #​2174
  • set GoogleAPIClientOption on GCP KMS provider in #​2128
Refactoring
  • cryptoutils: move goodkey validation to separate package in #​2194
  • Stop depending on golang.org/x/crypto for sha3 in #​2209
  • remove duplicative dependency for portable browser opener in #​2178
  • consolidate deep Equal usage to one library in #​2177
  • Drop redundant aws-sdk-go dependency in the e2e kms tests in #​2172

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@github-actions github-actions Bot added the image Related to "image" package label Nov 19, 2025
@renovate renovate Bot force-pushed the renovate/github.com-sigstore-sigstore-1.x branch 10 times, most recently from db73de2 to d540761 Compare November 25, 2025 05:14
@packit-as-a-service

Copy link
Copy Markdown

Packit jobs failed. @containers/packit-build please check.

@renovate renovate Bot force-pushed the renovate/github.com-sigstore-sigstore-1.x branch 2 times, most recently from e30dc9c to 95f394d Compare November 25, 2025 06:42

@mtrmac mtrmac left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

To be confirmed, but I don’t think we want to update to Go 1.25 for now. I have filed #493 to update as far as we can, to benefit from some dependency trimming.

@renovate renovate Bot force-pushed the renovate/github.com-sigstore-sigstore-1.x branch from 95f394d to d5a6e70 Compare November 25, 2025 09:34
@renovate renovate Bot force-pushed the renovate/github.com-sigstore-sigstore-1.x branch 12 times, most recently from 71667c6 to bdcc149 Compare December 1, 2025 10:44
@renovate renovate Bot changed the title fix(deps): update module github.com/sigstore/sigstore to v1.10.0 fix(deps): update module github.com/sigstore/sigstore to v1.10.2 Dec 9, 2025
@renovate renovate Bot force-pushed the renovate/github.com-sigstore-sigstore-1.x branch 15 times, most recently from b16c494 to f8ab457 Compare December 13, 2025 00:41
@renovate renovate Bot changed the title fix(deps): update module github.com/sigstore/sigstore to v1.10.2 fix(deps): update module github.com/sigstore/sigstore to v1.10.3 Dec 13, 2025
@renovate

renovate Bot commented Jan 5, 2026

Copy link
Copy Markdown
Contributor Author

ℹ️ Artifact update notice

File name: image/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 2 additional dependencies were updated

Details:

Package Change
github.com/coreos/go-oidc/v3 v3.16.0 -> v3.17.0
github.com/google/go-containerregistry v0.20.6 -> v0.20.7

@renovate renovate Bot force-pushed the renovate/github.com-sigstore-sigstore-1.x branch 10 times, most recently from eb1c8bc to 1865122 Compare January 8, 2026 15:04
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Miloslav Trmač <mitr@redhat.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

common Related to "common" package dependencies image Related to "image" package

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant