Skip to content

Bump sigstore/gh-action-sigstore-python from cd06a1783504a0c8e550f0d0cd47d3bbae8d71bd to f007550333186b0e2bb784f17bd939f6cac44426#898

Open
dependabot[bot] wants to merge 1 commit intodevelopfrom
dependabot/github_actions/sigstore/gh-action-sigstore-python-f007550333186b0e2bb784f17bd939f6cac44426
Open

Bump sigstore/gh-action-sigstore-python from cd06a1783504a0c8e550f0d0cd47d3bbae8d71bd to f007550333186b0e2bb784f17bd939f6cac44426#898
dependabot[bot] wants to merge 1 commit intodevelopfrom
dependabot/github_actions/sigstore/gh-action-sigstore-python-f007550333186b0e2bb784f17bd939f6cac44426

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 16, 2026

Bumps sigstore/gh-action-sigstore-python from cd06a1783504a0c8e550f0d0cd47d3bbae8d71bd to f007550333186b0e2bb784f17bd939f6cac44426.

Changelog

Sourced from sigstore/gh-action-sigstore-python's changelog.

Changelog

All notable changes to gh-action-sigstore-python will be documented in this file.

The format is based on Keep a Changelog.

All versions prior to 3.0.0 are untracked.

[Unreleased]

[3.2.0]

gh-action-sigstore-python now manages the used Python version internally, improving reliability.

Changed

  • Manage Python version internally (#242, #258)
  • Dependency updates

[3.1.0]

gh-action-sigstore-python is now compatible with Rekor v2 transparency log (but produced signature bundles still contain Rekor v1 entries by default).

Changed

  • The action now uses sigstore-python 4.1. All other dependencies are also updated (#220)

Fixed

  • Fixed incompatibility with Python 3.14 by upgrading dependencies (#225)

Added

  • rekor-version argument was added to control the Rekor transparency log version when signing. The default version in the gh-action-sigstore-python 3.x series will remain 1 (except when using staging: true). (#228)

[3.0.1]

Changed

  • The minimum Python version supported by this action is now 3.9 (#155)

... (truncated)

Commits
  • f007550 build(deps): bump id in the python-dependencies group (#313)
  • b9b91ab build(deps): bump cryptography from 46.0.4 to 46.0.5 in /requirements (#312)
  • f45393f build(deps-dev): bump ruff in the python-dependencies group (#311)
  • 3288b1e build(deps): bump rich in the python-dependencies group (#310)
  • 9e9dfb5 build(deps): bump astral-sh/setup-uv in the actions group (#308)
  • a636f88 build(deps): bump pyjwt in the python-dependencies group (#309)
  • a9b53f7 build(deps): bump github/codeql-action in the actions group (#307)
  • b0dd583 build(deps): bump cryptography in the python-dependencies group (#306)
  • fa47848 build(deps): bump pathspec in the python-dependencies group (#305)
  • 333002c build(deps): bump github/codeql-action in the actions group (#303)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

📚 Documentation preview 📚: https://montepy--898.org.readthedocs.build/en/898/

Bumps [sigstore/gh-action-sigstore-python](https://github.com/sigstore/gh-action-sigstore-python) from cd06a1783504a0c8e550f0d0cd47d3bbae8d71bd to f007550333186b0e2bb784f17bd939f6cac44426.
- [Release notes](https://github.com/sigstore/gh-action-sigstore-python/releases)
- [Changelog](https://github.com/sigstore/gh-action-sigstore-python/blob/main/CHANGELOG.md)
- [Commits](sigstore/gh-action-sigstore-python@cd06a17...f007550)

---
updated-dependencies:
- dependency-name: sigstore/gh-action-sigstore-python
  dependency-version: f007550333186b0e2bb784f17bd939f6cac44426
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Feb 16, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants