Maksim Nabokikh
2f6a185711
test: Add conformance tests for Vault signer integration ( #4520 )
...
Signed-off-by: maksim.nabokikh <max.nabokih@gmail.com>
Signed-off-by: Maksim Nabokikh <max.nabokih@gmail.com>
Co-authored-by: Alwx <alwxsin@gmail.com>
1 month ago
dependabot[bot]
246124ebbd
build(deps): bump anchore/sbom-action from 0.22.1 to 0.22.2 ( #4510 )
...
Bumps [anchore/sbom-action](https://github.com/anchore/sbom-action ) from 0.22.1 to 0.22.2.
- [Release notes](https://github.com/anchore/sbom-action/releases )
- [Changelog](https://github.com/anchore/sbom-action/blob/main/RELEASE.md )
- [Commits](deef08a0db...28d71544de )
---
updated-dependencies:
- dependency-name: anchore/sbom-action
dependency-version: 0.22.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 month ago
dependabot[bot]
cee32d6936
build(deps): bump github/codeql-action from 4.32.0 to 4.32.2 ( #4509 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.32.0 to 4.32.2.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](b20883b0cd...45cbd0c69e )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.32.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 month ago
dependabot[bot]
1997f6322d
build(deps): bump docker/login-action from 3.6.0 to 3.7.0
...
Bumps [docker/login-action](https://github.com/docker/login-action ) from 3.6.0 to 3.7.0.
- [Release notes](https://github.com/docker/login-action/releases )
- [Commits](5e57cd1181...c94ce9fb46 )
---
updated-dependencies:
- dependency-name: docker/login-action
dependency-version: 3.7.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
1 month ago
dependabot[bot]
9362179a11
build(deps): bump actions/cache from 5.0.2 to 5.0.3
...
Bumps [actions/cache](https://github.com/actions/cache ) from 5.0.2 to 5.0.3.
- [Release notes](https://github.com/actions/cache/releases )
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md )
- [Commits](8b402f58fb...cdf6c1fa76 )
---
updated-dependencies:
- dependency-name: actions/cache
dependency-version: 5.0.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2 months ago
dependabot[bot]
c78b28b2f2
build(deps): bump github/codeql-action from 4.31.11 to 4.32.0
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.31.11 to 4.32.0.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](19b2f06db2...b20883b0cd )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.32.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2 months ago
dependabot[bot]
f817d8bf47
build(deps): bump actions/attest-build-provenance from 3.1.0 to 3.2.0
...
Bumps [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance ) from 3.1.0 to 3.2.0.
- [Release notes](https://github.com/actions/attest-build-provenance/releases )
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md )
- [Commits](00014ed6ed...96278af6ca )
---
updated-dependencies:
- dependency-name: actions/attest-build-provenance
dependency-version: 3.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2 months ago
dependabot[bot]
227aeb80b7
build(deps): bump anchore/sbom-action from 0.22.0 to 0.22.1
...
Bumps [anchore/sbom-action](https://github.com/anchore/sbom-action ) from 0.22.0 to 0.22.1.
- [Release notes](https://github.com/anchore/sbom-action/releases )
- [Changelog](https://github.com/anchore/sbom-action/blob/main/RELEASE.md )
- [Commits](62ad5284b8...deef08a0db )
---
updated-dependencies:
- dependency-name: anchore/sbom-action
dependency-version: 0.22.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2 months ago
dependabot[bot]
b13e020e42
build(deps): bump github/codeql-action from 4.31.10 to 4.31.11 ( #4492 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.31.10 to 4.31.11.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](cdefb33c0f...19b2f06db2 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.31.11
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 months ago
dependabot[bot]
d8acc5a7d7
build(deps): bump actions/checkout from 6.0.1 to 6.0.2 ( #4489 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 6.0.1 to 6.0.2.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](8e8c483db8...de0fac2e45 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 6.0.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 months ago
dependabot[bot]
dcbaa9d01d
build(deps): bump anchore/sbom-action from 0.20.11 to 0.22.0 ( #4487 )
...
Bumps [anchore/sbom-action](https://github.com/anchore/sbom-action ) from 0.20.11 to 0.22.0.
- [Release notes](https://github.com/anchore/sbom-action/releases )
- [Changelog](https://github.com/anchore/sbom-action/blob/main/RELEASE.md )
- [Commits](43a17d6e7a...62ad5284b8 )
---
updated-dependencies:
- dependency-name: anchore/sbom-action
dependency-version: 0.22.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 months ago
dependabot[bot]
25d62b7090
build(deps): bump actions/attest-build-provenance from 3.0.0 to 3.1.0 ( #4485 )
...
Bumps [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance ) from 3.0.0 to 3.1.0.
- [Release notes](https://github.com/actions/attest-build-provenance/releases )
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md )
- [Commits](977bb373ed...00014ed6ed )
---
updated-dependencies:
- dependency-name: actions/attest-build-provenance
dependency-version: 3.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 months ago
dependabot[bot]
5f0c5428ca
build(deps): bump actions/cache from 5.0.1 to 5.0.2 ( #4484 )
...
Bumps [actions/cache](https://github.com/actions/cache ) from 5.0.1 to 5.0.2.
- [Release notes](https://github.com/actions/cache/releases )
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md )
- [Commits](9255dc7a25...8b402f58fb )
---
updated-dependencies:
- dependency-name: actions/cache
dependency-version: 5.0.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 months ago
dependabot[bot]
2725903ad5
build(deps): bump docker/setup-buildx-action from 3.11.1 to 3.12.0 ( #4471 )
...
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action ) from 3.11.1 to 3.12.0.
- [Release notes](https://github.com/docker/setup-buildx-action/releases )
- [Commits](e468171a9d...8d2750c68a )
---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
dependency-version: 3.12.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 months ago
dependabot[bot]
9f199acb63
build(deps): bump github/codeql-action from 4.31.7 to 4.31.10 ( #4470 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.31.7 to 4.31.10.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](cf1bb45a27...cdefb33c0f )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.31.10
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 months ago
dependabot[bot]
1a49fc3470
build(deps): bump actions/cache from 4.3.0 to 5.0.1 ( #4473 )
...
Bumps [actions/cache](https://github.com/actions/cache ) from 4.3.0 to 5.0.1.
- [Release notes](https://github.com/actions/cache/releases )
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md )
- [Commits](0057852bfa...9255dc7a25 )
---
updated-dependencies:
- dependency-name: actions/cache
dependency-version: 5.0.1
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 months ago
dependabot[bot]
f0a9fa4c7e
build(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 ( #4477 )
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 5.0.0 to 6.0.0.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](330a01c490...b7c566a772 )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-version: 6.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 months ago
dependabot[bot]
7942817f3a
build(deps): bump actions/setup-go from 6.1.0 to 6.2.0 ( #4476 )
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 6.1.0 to 6.2.0.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](4dc6199c7b...7a3fe6cf4c )
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-version: 6.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 months ago
dependabot[bot]
78363ecb56
build(deps): bump github/codeql-action from 4.31.3 to 4.31.7
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.31.3 to 4.31.7.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](014f16e7ab...cf1bb45a27 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.31.7
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
3 months ago
dependabot[bot]
71b893e58a
build(deps): bump actions/checkout from 5.0.0 to 6.0.1
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 5.0.0 to 6.0.1.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](08c6903cd8...8e8c483db8 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 6.0.1
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
3 months ago
dependabot[bot]
3dea4ba5d9
build(deps): bump anchore/sbom-action from 0.20.9 to 0.20.11
...
Bumps [anchore/sbom-action](https://github.com/anchore/sbom-action ) from 0.20.9 to 0.20.11.
- [Release notes](https://github.com/anchore/sbom-action/releases )
- [Changelog](https://github.com/anchore/sbom-action/blob/main/RELEASE.md )
- [Commits](8e94d75ddd...43a17d6e7a )
---
updated-dependencies:
- dependency-name: anchore/sbom-action
dependency-version: 0.20.11
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
3 months ago
dependabot[bot]
4d1d54cbe7
build(deps): bump docker/metadata-action from 5.9.0 to 5.10.0
...
Bumps [docker/metadata-action](https://github.com/docker/metadata-action ) from 5.9.0 to 5.10.0.
- [Release notes](https://github.com/docker/metadata-action/releases )
- [Commits](318604b99e...c299e40c65 )
---
updated-dependencies:
- dependency-name: docker/metadata-action
dependency-version: 5.10.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
3 months ago
dependabot[bot]
2da2a227d5
build(deps): bump actions/setup-go from 6.0.0 to 6.1.0
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 6.0.0 to 6.1.0.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](4469467582...4dc6199c7b )
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-version: 6.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
3 months ago
dependabot[bot]
ac3ccad51d
build(deps): bump github/codeql-action from 4.31.2 to 4.31.3
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.31.2 to 4.31.3.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](0499de31b9...014f16e7ab )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.31.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
4 months ago
dependabot[bot]
0705d284f2
build(deps): bump actions/dependency-review-action from 4.8.1 to 4.8.2
...
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action ) from 4.8.1 to 4.8.2.
- [Release notes](https://github.com/actions/dependency-review-action/releases )
- [Commits](40c09b7dc9...3c4e3dcb1a )
---
updated-dependencies:
- dependency-name: actions/dependency-review-action
dependency-version: 4.8.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
4 months ago
dependabot[bot]
7869639830
build(deps): bump docker/setup-qemu-action from 3.6.0 to 3.7.0
...
Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action ) from 3.6.0 to 3.7.0.
- [Release notes](https://github.com/docker/setup-qemu-action/releases )
- [Commits](29109295f8...c7c5346462 )
---
updated-dependencies:
- dependency-name: docker/setup-qemu-action
dependency-version: 3.7.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
4 months ago
dependabot[bot]
5be29e99ac
build(deps): bump docker/metadata-action from 5.8.0 to 5.9.0
...
Bumps [docker/metadata-action](https://github.com/docker/metadata-action ) from 5.8.0 to 5.9.0.
- [Release notes](https://github.com/docker/metadata-action/releases )
- [Commits](c1e51972af...318604b99e )
---
updated-dependencies:
- dependency-name: docker/metadata-action
dependency-version: 5.9.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
4 months ago
dependabot[bot]
ae58fdd2f4
build(deps): bump helm/kind-action from 1.12.0 to 1.13.0
...
Bumps [helm/kind-action](https://github.com/helm/kind-action ) from 1.12.0 to 1.13.0.
- [Release notes](https://github.com/helm/kind-action/releases )
- [Commits](a1b0e39133...92086f6be0 )
---
updated-dependencies:
- dependency-name: helm/kind-action
dependency-version: 1.13.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
4 months ago
dependabot[bot]
9a27a4af44
build(deps): bump sigstore/cosign-installer from 3.10.0 to 4.0.0
...
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer ) from 3.10.0 to 4.0.0.
- [Release notes](https://github.com/sigstore/cosign-installer/releases )
- [Commits](d7543c93d8...faadad0cce )
---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
dependency-version: 4.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
4 months ago
dependabot[bot]
74a66cb653
build(deps): bump github/codeql-action from 4.30.8 to 4.31.2
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.30.8 to 4.31.2.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](f443b600d9...0499de31b9 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.31.2
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
5 months ago
dependabot[bot]
86466446d3
build(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 4.6.2 to 5.0.0.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](ea165f8d65...330a01c490 )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-version: 5.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
5 months ago
dependabot[bot]
3273c3be19
build(deps): bump anchore/sbom-action from 0.20.6 to 0.20.9
...
Bumps [anchore/sbom-action](https://github.com/anchore/sbom-action ) from 0.20.6 to 0.20.9.
- [Release notes](https://github.com/anchore/sbom-action/releases )
- [Changelog](https://github.com/anchore/sbom-action/blob/main/RELEASE.md )
- [Commits](f8bdd1d8ac...8e94d75ddd )
---
updated-dependencies:
- dependency-name: anchore/sbom-action
dependency-version: 0.20.9
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
5 months ago
dependabot[bot]
79a5ea4764
build(deps): bump actions/dependency-review-action from 4.7.3 to 4.8.1
...
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action ) from 4.7.3 to 4.8.1.
- [Release notes](https://github.com/actions/dependency-review-action/releases )
- [Commits](595b5aeba7...40c09b7dc9 )
---
updated-dependencies:
- dependency-name: actions/dependency-review-action
dependency-version: 4.8.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
5 months ago
dependabot[bot]
e4c4289d12
build(deps): bump github/codeql-action from 3.30.4 to 4.30.8
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3.30.4 to 4.30.8.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](303c0aef88...f443b600d9 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.30.8
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
5 months ago
dependabot[bot]
4c682b5169
build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3
...
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action ) from 2.4.2 to 2.4.3.
- [Release notes](https://github.com/ossf/scorecard-action/releases )
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md )
- [Commits](05b42c6244...4eaacf0543 )
---
updated-dependencies:
- dependency-name: ossf/scorecard-action
dependency-version: 2.4.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
6 months ago
dependabot[bot]
accd2bf835
build(deps): bump docker/login-action from 3.5.0 to 3.6.0
...
Bumps [docker/login-action](https://github.com/docker/login-action ) from 3.5.0 to 3.6.0.
- [Release notes](https://github.com/docker/login-action/releases )
- [Commits](184bdaa072...5e57cd1181 )
---
updated-dependencies:
- dependency-name: docker/login-action
dependency-version: 3.6.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
6 months ago
dependabot[bot]
7d7d21a8a0
build(deps): bump actions/cache from 4.2.4 to 4.3.0
...
Bumps [actions/cache](https://github.com/actions/cache ) from 4.2.4 to 4.3.0.
- [Release notes](https://github.com/actions/cache/releases )
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md )
- [Commits](0400d5f644...0057852bfa )
---
updated-dependencies:
- dependency-name: actions/cache
dependency-version: 4.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
6 months ago
dependabot[bot]
d277f65074
build(deps): bump github/codeql-action from 3.30.3 to 3.30.4
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3.30.3 to 3.30.4.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](192325c861...303c0aef88 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 3.30.4
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
6 months ago
dependabot[bot]
50bf779478
build(deps): bump anchore/sbom-action from 0.20.5 to 0.20.6
...
Bumps [anchore/sbom-action](https://github.com/anchore/sbom-action ) from 0.20.5 to 0.20.6.
- [Release notes](https://github.com/anchore/sbom-action/releases )
- [Changelog](https://github.com/anchore/sbom-action/blob/main/RELEASE.md )
- [Commits](da167eac91...f8bdd1d8ac )
---
updated-dependencies:
- dependency-name: anchore/sbom-action
dependency-version: 0.20.6
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
6 months ago
dependabot[bot]
f6f906d4ef
build(deps): bump sigstore/cosign-installer from 3.9.2 to 3.10.0
...
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer ) from 3.9.2 to 3.10.0.
- [Release notes](https://github.com/sigstore/cosign-installer/releases )
- [Commits](d58896d6a1...d7543c93d8 )
---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
dependency-version: 3.10.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
6 months ago
dependabot[bot]
af872f2a52
build(deps): bump github/codeql-action from 3.29.11 to 3.30.3
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3.29.11 to 3.30.3.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](3c3833e0f8...192325c861 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 3.30.3
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
6 months ago
dependabot[bot]
ac709a4789
build(deps): bump oras-project/setup-oras from 1.2.3 to 1.2.4
...
Bumps [oras-project/setup-oras](https://github.com/oras-project/setup-oras ) from 1.2.3 to 1.2.4.
- [Release notes](https://github.com/oras-project/setup-oras/releases )
- [Commits](8d34698a59...22ce207df3 )
---
updated-dependencies:
- dependency-name: oras-project/setup-oras
dependency-version: 1.2.4
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
6 months ago
dependabot[bot]
6ef67976bf
build(deps): bump aquasecurity/trivy-action from 0.33.0 to 0.33.1
...
Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action ) from 0.33.0 to 0.33.1.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases )
- [Commits](f9424c10c3...b6643a29fe )
---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
dependency-version: 0.33.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
6 months ago
dependabot[bot]
18970bb302
build(deps): bump actions/setup-go from 5.5.0 to 6.0.0
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 5.5.0 to 6.0.0.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](d35c59abb0...4469467582 )
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-version: 6.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
6 months ago
dependabot[bot]
f10f4d6ef8
build(deps): bump actions/attest-build-provenance from 2.4.0 to 3.0.0
...
Bumps [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance ) from 2.4.0 to 3.0.0.
- [Release notes](https://github.com/actions/attest-build-provenance/releases )
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md )
- [Commits](e8998f9491...977bb373ed )
---
updated-dependencies:
- dependency-name: actions/attest-build-provenance
dependency-version: 3.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
7 months ago
dependabot[bot]
ad912d0569
build(deps): bump aquasecurity/trivy-action from 0.32.0 to 0.33.0
...
Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action ) from 0.32.0 to 0.33.0.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases )
- [Commits](dc5a429b52...f9424c10c3 )
---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
dependency-version: 0.33.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
7 months ago
dependabot[bot]
d1269f9e58
build(deps): bump actions/dependency-review-action from 4.7.2 to 4.7.3
...
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action ) from 4.7.2 to 4.7.3.
- [Release notes](https://github.com/actions/dependency-review-action/releases )
- [Commits](bc41886e18...595b5aeba7 )
---
updated-dependencies:
- dependency-name: actions/dependency-review-action
dependency-version: 4.7.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
7 months ago
Doug Goldstein
083908080e
ci: avoid hardcoded dexidp GitHub org
...
Two changes here, the ghcr.io image is made using the github.repository
variable so the attestation should be as well. The Docker Hub image
should only be built when the repo matches the upstream official repo.
Signed-off-by: Doug Goldstein <cardoe@cardoe.com>
7 months ago
dependabot[bot]
d2854f077f
build(deps): bump github/codeql-action from 3.29.9 to 3.29.11
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3.29.9 to 3.29.11.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](df559355d5...3c3833e0f8 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 3.29.11
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
7 months ago
dependabot[bot]
957b85a71f
build(deps): bump actions/dependency-review-action from 4.7.1 to 4.7.2
...
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action ) from 4.7.1 to 4.7.2.
- [Release notes](https://github.com/actions/dependency-review-action/releases )
- [Commits](da24556b54...bc41886e18 )
---
updated-dependencies:
- dependency-name: actions/dependency-review-action
dependency-version: 4.7.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
7 months ago