Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Nov 24, 2025

This PR contains the following updates:

Package Type Update Change Pending
sigstore/gh-action-sigstore-python action minor v3.0.0 -> v3.1.0 v3.2.0

Release Notes

sigstore/gh-action-sigstore-python (sigstore/gh-action-sigstore-python)

v3.1.0

Compare Source

gh-action-sigstore-python is now compatible with Rekor v2
transparency log (but produced signature bundles still contain Rekor v1 entries by default).

Changed
  • The action now uses sigstore-python 4.1. All other dependencies are also updated
    (#​220)
Fixed
  • Fixed incompatibility with Python 3.14 by upgrading dependencies
    (#​225)
Added
  • rekor-version argument was added to control the Rekor transparency log
    version when signing. The default version in the gh-action-sigstore-python
    3.x series will remain 1 (except when using staging: true).
    (#​228)

v3.0.1

Compare Source

Changed
  • The minimum Python version supported by this action is now 3.9
    (#​155)
  • The action's Python dependencies are now fully pinned to specific versions
    (#​165)
Fixed
  • The rfc3161-client dependency has been upgraded to 1.0.3 to resolve
    a security vulnerability
    (#​182)

Configuration

📅 Schedule: Branch creation - "after 7am and before 4pm on monday" in timezone Europe/London, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@codecov
Copy link

codecov bot commented Nov 24, 2025

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 38.51%. Comparing base (507f4bd) to head (8bcb84d).

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #698   +/-   ##
=======================================
  Coverage   38.51%   38.51%           
=======================================
  Files          99       99           
  Lines       11661    11661           
  Branches     1542     1542           
=======================================
  Hits         4491     4491           
  Misses       6972     6972           
  Partials      198      198           
🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant