Skip to content

🌱 Bump github.com/sigstore/fulcio from 1.8.4 to 1.8.5#1628

Merged
spencerschrock merged 1 commit into
mainfrom
dependabot/go_modules/github.com/sigstore/fulcio-1.8.5
Jun 12, 2026
Merged

🌱 Bump github.com/sigstore/fulcio from 1.8.4 to 1.8.5#1628
spencerschrock merged 1 commit into
mainfrom
dependabot/go_modules/github.com/sigstore/fulcio-1.8.5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jan 13, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/sigstore/fulcio from 1.8.4 to 1.8.5.

Release notes

Sourced from github.com/sigstore/fulcio's releases.

v1.8.5

Changelog

This resolves GHSA-59jp-pj84-45mr - Server-side request forgery via MetaIssuer regex bypass

Thanks for all contributors!

Changelog

Sourced from github.com/sigstore/fulcio's changelog.

v1.8.5

Vulnerability Fixes

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jan 13, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner January 13, 2026 18:50
@dependabot
dependabot Bot requested review from AdamKorcz and raghavkaul January 13, 2026 18:50
@justaugustus

Copy link
Copy Markdown
Member

@dependabot rebase

@justaugustus

Copy link
Copy Markdown
Member

@dependabot recreate

@dependabot
dependabot Bot force-pushed the dependabot/go_modules/github.com/sigstore/fulcio-1.8.5 branch from 24b8d2c to f10cf76 Compare March 19, 2026 05:02
@justaugustus

Copy link
Copy Markdown
Member

@dependabot recreate

@dependabot
dependabot Bot force-pushed the dependabot/go_modules/github.com/sigstore/fulcio-1.8.5 branch from f10cf76 to d3f64fb Compare March 19, 2026 05:10
@spencerschrock

Copy link
Copy Markdown
Member

@dependabot recreate

Bumps [github.com/sigstore/fulcio](https://github.com/sigstore/fulcio) from 1.8.4 to 1.8.5.
- [Release notes](https://github.com/sigstore/fulcio/releases)
- [Changelog](https://github.com/sigstore/fulcio/blob/main/CHANGELOG.md)
- [Commits](sigstore/fulcio@v1.8.4...v1.8.5)

---
updated-dependencies:
- dependency-name: github.com/sigstore/fulcio
  dependency-version: 1.8.5
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title 🌱 Bump github.com/sigstore/fulcio from 1.7.1 to 1.8.5 🌱 Bump github.com/sigstore/fulcio from 1.8.4 to 1.8.5 Jun 12, 2026
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/github.com/sigstore/fulcio-1.8.5 branch from d3f64fb to 7cd95f6 Compare June 12, 2026 00:12
@spencerschrock
spencerschrock enabled auto-merge (squash) June 12, 2026 00:12
@spencerschrock
spencerschrock merged commit b0fdde1 into main Jun 12, 2026
10 checks passed
@spencerschrock
spencerschrock deleted the dependabot/go_modules/github.com/sigstore/fulcio-1.8.5 branch June 12, 2026 00:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants