Skip to content
This repository was archived by the owner on Dec 24, 2025. It is now read-only.

chore(deps): update sigstore/gh-action-sigstore-python action to v3.2.0#31

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/sigstore-gh-action-sigstore-python-3.x
Open

chore(deps): update sigstore/gh-action-sigstore-python action to v3.2.0#31
renovate[bot] wants to merge 1 commit intomainfrom
renovate/sigstore-gh-action-sigstore-python-3.x

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented Jun 20, 2025

This PR contains the following updates:

Package Type Update Change
sigstore/gh-action-sigstore-python action minor v3.0.0 -> v3.2.0

Release Notes

sigstore/gh-action-sigstore-python (sigstore/gh-action-sigstore-python)

v3.2.0

Compare Source

gh-action-sigstore-python action now manages the used Python version internally, improving reliability.

Changed
  • Manage Python version internally (#​242, #​258)
  • Dependency updates

v3.1.0

Compare Source

gh-action-sigstore-python is now compatible with Rekor v2
transparency log (but produced signature bundles still contain Rekor v1 entries by default).

Changed
  • The action now uses sigstore-python 4.1. All other dependencies are also updated
    (#​220)
Fixed
  • Fixed incompatibility with Python 3.14 by upgrading dependencies
    (#​225)
Added
  • rekor-version argument was added to control the Rekor transparency log
    version when signing. The default version in the gh-action-sigstore-python
    3.x series will remain 1 (except when using staging: true).
    (#​228)

v3.0.1

Compare Source

Changed
  • The minimum Python version supported by this action is now 3.9
    (#​155)
  • The action's Python dependencies are now fully pinned to specific versions
    (#​165)
Fixed
  • The rfc3161-client dependency has been upgraded to 1.0.3 to resolve
    a security vulnerability
    (#​182)

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot force-pushed the renovate/sigstore-gh-action-sigstore-python-3.x branch from 9c14b57 to dba0edf Compare October 21, 2025 08:49
@renovate renovate Bot changed the title chore(deps): update sigstore/gh-action-sigstore-python action to v3.0.1 chore(deps): update sigstore/gh-action-sigstore-python action to v3.1.0 Oct 21, 2025
@renovate renovate Bot changed the title chore(deps): update sigstore/gh-action-sigstore-python action to v3.1.0 chore(deps): update sigstore/gh-action-sigstore-python action to v3.2.0 Dec 3, 2025
@renovate renovate Bot force-pushed the renovate/sigstore-gh-action-sigstore-python-3.x branch from dba0edf to 1a1b5c7 Compare December 3, 2025 10:56
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants