Bump sigstore/cosign-installer from 3.9.1 to 3.10.0 - #1696
Conversation
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 3.9.1 to 3.10.0. - [Release notes](https://github.com/sigstore/cosign-installer/releases) - [Commits](sigstore/cosign-installer@398d4b0...d7543c9) --- updated-dependencies: - dependency-name: sigstore/cosign-installer dependency-version: 3.10.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
dependabot
Bot
added
dependencies
|
/merge |
|
View all feedbacks in Devflow UI.
This merge request is not mergeable according to GitHub. Common reasons include pending required checks, missing approvals, or merge conflicts — but it could also be blocked by other repository rules or settings.
The expected merge time in
|
dd-devflow
Bot
added
mergequeue-status: done
and removed
mergequeue-status: in_progress
labels
1 participant
Bumps sigstore/cosign-installer from 3.9.1 to 3.10.0.
Release notes
Sourced from sigstore/cosign-installer's releases.
Commits
d7543c9Bump default Cosign to v2.6.0 (#200)920f20fBump actions/setup-go from 5.5.0 to 6.0.0 (#199)bb9dfc1Bump actions/github-script from 7.0.1 to 8.0.0 (#198)074636bBump actions/checkout from 4.2.2 to 5.0.0 (#197)d58896dUpdate default to v2.5.3 (#196)e40248cdrop old unsupported versions <v2.0.0 (#192)d9374b9not fail fast and setup permissions (#195)You can trigger a rebase of this PR by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)