vee1e/gittuf
1
0
Fork 0
mirror of https://github.com/vee1e/gittuf.git synced 2026-09-03 03:07:10 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
1610 commits 31 branches 25 tags 6.8 MiB
Commit graph

155 commits

Author SHA1 Message Date
dependabot[bot]
db6ce7daae
chore(deps): bump github.com/go-jose/go-jose/v3 from 3.0.3 to 3.0.4 
Bumps [github.com/go-jose/go-jose/v3](https://github.com/go-jose/go-jose) from 3.0.3 to 3.0.4.
- [Release notes](https://github.com/go-jose/go-jose/releases)
- [Changelog](https://github.com/go-jose/go-jose/blob/main/CHANGELOG.md)
- [Commits](https://github.com/go-jose/go-jose/compare/v3.0.3...v3.0.4)

---
updated-dependencies:
- dependency-name: github.com/go-jose/go-jose/v3
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-02-27 15:43:13 +00:00
dependabot[bot]
ccf1a54de1
chore(deps): bump the all group with 2 updates 
Bumps the all group with 2 updates: [github.com/ProtonMail/go-crypto](https://github.com/ProtonMail/go-crypto) and [github.com/go-git/go-git/v5](https://github.com/go-git/go-git).


Updates `github.com/ProtonMail/go-crypto` from 1.1.5 to 1.1.6
- [Release notes](https://github.com/ProtonMail/go-crypto/releases)
- [Commits](https://github.com/ProtonMail/go-crypto/compare/v1.1.5...v1.1.6)

Updates `github.com/go-git/go-git/v5` from 5.13.2 to 5.14.0
- [Release notes](https://github.com/go-git/go-git/releases)
- [Commits](https://github.com/go-git/go-git/compare/v5.13.2...v5.14.0)

---
updated-dependencies:
- dependency-name: github.com/ProtonMail/go-crypto
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: github.com/go-git/go-git/v5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-02-27 14:37:18 +00:00
dependabot[bot]
c9dc68cd57
chore(deps): bump github.com/charmbracelet/bubbletea in the all group 
Bumps the all group with 1 update: [github.com/charmbracelet/bubbletea](https://github.com/charmbracelet/bubbletea).


Updates `github.com/charmbracelet/bubbletea` from 1.3.3 to 1.3.4
- [Release notes](https://github.com/charmbracelet/bubbletea/releases)
- [Changelog](https://github.com/charmbracelet/bubbletea/blob/main/.goreleaser.yml)
- [Commits](https://github.com/charmbracelet/bubbletea/compare/v1.3.3...v1.3.4)

---
updated-dependencies:
- dependency-name: github.com/charmbracelet/bubbletea
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-02-26 14:08:22 +00:00
dependabot[bot]
5928682d5a
chore(deps): bump github.com/go-jose/go-jose/v4 from 4.0.4 to 4.0.5 
Bumps [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose) from 4.0.4 to 4.0.5.
- [Release notes](https://github.com/go-jose/go-jose/releases)
- [Changelog](https://github.com/go-jose/go-jose/blob/main/CHANGELOG.md)
- [Commits](https://github.com/go-jose/go-jose/compare/v4.0.4...v4.0.5)

---
updated-dependencies:
- dependency-name: github.com/go-jose/go-jose/v4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-02-25 15:53:33 +00:00
dependabot[bot]
b9b140c36e
chore(deps): bump golang.org/x/crypto in the all group 
Bumps the all group with 1 update: [golang.org/x/crypto](https://github.com/golang/crypto).


Updates `golang.org/x/crypto` from 0.33.0 to 0.35.0
- [Commits](https://github.com/golang/crypto/compare/v0.33.0...v0.35.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-02-25 14:24:36 +00:00
dependabot[bot]
07eed9c733
chore(deps): bump github.com/sigstore/sigstore in the all group 
Bumps the all group with 1 update: [github.com/sigstore/sigstore](https://github.com/sigstore/sigstore).


Updates `github.com/sigstore/sigstore` from 1.8.14 to 1.8.15
- [Release notes](https://github.com/sigstore/sigstore/releases)
- [Commits](https://github.com/sigstore/sigstore/compare/v1.8.14...v1.8.15)

---
updated-dependencies:
- dependency-name: github.com/sigstore/sigstore
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-02-20 14:13:21 +00:00
dependabot[bot]
2b89f8a096
chore(deps): bump github.com/spf13/cobra in the all group 
Bumps the all group with 1 update: [github.com/spf13/cobra](https://github.com/spf13/cobra).


Updates `github.com/spf13/cobra` from 1.8.1 to 1.9.1
- [Release notes](https://github.com/spf13/cobra/releases)
- [Commits](https://github.com/spf13/cobra/compare/v1.8.1...v1.9.1)

---
updated-dependencies:
- dependency-name: github.com/spf13/cobra
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-02-17 15:39:31 +00:00
dependabot[bot]
73ae08cbbb
chore(deps): bump github.com/sigstore/sigstore in the all group 
Bumps the all group with 1 update: [github.com/sigstore/sigstore](https://github.com/sigstore/sigstore).


Updates `github.com/sigstore/sigstore` from 1.8.12 to 1.8.14
- [Release notes](https://github.com/sigstore/sigstore/releases)
- [Commits](https://github.com/sigstore/sigstore/compare/v1.8.12...v1.8.14)

---
updated-dependencies:
- dependency-name: github.com/sigstore/sigstore
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-02-14 14:11:55 +00:00
dependabot[bot]
b975f50ad5
chore(deps): bump github.com/charmbracelet/bubbletea 
Bumps the all group with 1 update in the / directory: [github.com/charmbracelet/bubbletea](https://github.com/charmbracelet/bubbletea).


Updates `github.com/charmbracelet/bubbletea` from 1.3.0 to 1.3.3
- [Release notes](https://github.com/charmbracelet/bubbletea/releases)
- [Changelog](https://github.com/charmbracelet/bubbletea/blob/main/.goreleaser.yml)
- [Commits](https://github.com/charmbracelet/bubbletea/compare/v1.3.0...v1.3.3)

---
updated-dependencies:
- dependency-name: github.com/charmbracelet/bubbletea
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-02-12 15:02:09 +00:00
dependabot[bot]
416620ee0f
chore(deps): bump golang.org/x/crypto in the all group 
Bumps the all group with 1 update: [golang.org/x/crypto](https://github.com/golang/crypto).


Updates `golang.org/x/crypto` from 0.32.0 to 0.33.0
- [Commits](https://github.com/golang/crypto/compare/v0.32.0...v0.33.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-02-10 14:44:53 +00:00
dependabot[bot]
6d093ba5a7
chore(deps): bump google.golang.org/protobuf in the all group 
Bumps the all group with 1 update: google.golang.org/protobuf.


Updates `google.golang.org/protobuf` from 1.36.4 to 1.36.5

---
updated-dependencies:
- dependency-name: google.golang.org/protobuf
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-02-06 14:16:01 +00:00
dependabot[bot]
8b093be638
chore(deps): bump github.com/charmbracelet/bubbletea 
Bumps the all group with 1 update in the / directory: [github.com/charmbracelet/bubbletea](https://github.com/charmbracelet/bubbletea).


Updates `github.com/charmbracelet/bubbletea` from 1.2.4 to 1.3.0
- [Release notes](https://github.com/charmbracelet/bubbletea/releases)
- [Changelog](https://github.com/charmbracelet/bubbletea/blob/main/.goreleaser.yml)
- [Commits](https://github.com/charmbracelet/bubbletea/compare/v1.2.4...v1.3.0)

---
updated-dependencies:
- dependency-name: github.com/charmbracelet/bubbletea
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-02-05 15:54:04 +00:00
dependabot[bot]
35d733ad85
chore(deps): bump the all group across 1 directory with 2 updates 
Bumps the all group with 2 updates in the / directory: [github.com/in-toto/attestation](https://github.com/in-toto/attestation) and [github.com/sigstore/protobuf-specs](https://github.com/sigstore/protobuf-specs).


Updates `github.com/in-toto/attestation` from 1.1.0 to 1.1.1
- [Release notes](https://github.com/in-toto/attestation/releases)
- [Commits](https://github.com/in-toto/attestation/compare/v1.1.0...v1.1.1)

Updates `github.com/sigstore/protobuf-specs` from 0.3.3 to 0.4.0
- [Release notes](https://github.com/sigstore/protobuf-specs/releases)
- [Changelog](https://github.com/sigstore/protobuf-specs/blob/main/CHANGELOG.md)
- [Commits](https://github.com/sigstore/protobuf-specs/compare/v0.3.3...v0.4.0)

---
updated-dependencies:
- dependency-name: github.com/in-toto/attestation
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: github.com/sigstore/protobuf-specs
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-01-31 17:37:52 +00:00
dependabot[bot]
5023e91a3a
chore(deps): bump google.golang.org/protobuf in the all group 
Bumps the all group with 1 update: google.golang.org/protobuf.


Updates `google.golang.org/protobuf` from 1.36.3 to 1.36.4

---
updated-dependencies:
- dependency-name: google.golang.org/protobuf
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-01-24 14:59:13 +00:00
dependabot[bot]
e91b635fea
chore(deps): bump github.com/go-git/go-git/v5 in the all group 
Bumps the all group with 1 update: [github.com/go-git/go-git/v5](https://github.com/go-git/go-git).


Updates `github.com/go-git/go-git/v5` from 5.13.1 to 5.13.2
- [Release notes](https://github.com/go-git/go-git/releases)
- [Commits](https://github.com/go-git/go-git/compare/v5.13.1...v5.13.2)

---
updated-dependencies:
- dependency-name: github.com/go-git/go-git/v5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-01-23 14:06:32 +00:00
dependabot[bot]
7cc06dacf4
chore(deps): bump the all group with 3 updates 
Bumps the all group with 3 updates: [github.com/charmbracelet/bubbletea](https://github.com/charmbracelet/bubbletea), google.golang.org/protobuf and [github.com/charmbracelet/lipgloss](https://github.com/charmbracelet/lipgloss).


Updates `github.com/charmbracelet/bubbletea` from 1.1.1 to 1.2.4
- [Release notes](https://github.com/charmbracelet/bubbletea/releases)
- [Changelog](https://github.com/charmbracelet/bubbletea/blob/main/.goreleaser.yml)
- [Commits](https://github.com/charmbracelet/bubbletea/compare/v1.1.1...v1.2.4)

Updates `google.golang.org/protobuf` from 1.36.2 to 1.36.3

Updates `github.com/charmbracelet/lipgloss` from 0.13.0 to 1.0.0
- [Release notes](https://github.com/charmbracelet/lipgloss/releases)
- [Changelog](https://github.com/charmbracelet/lipgloss/blob/master/.goreleaser.yml)
- [Commits](https://github.com/charmbracelet/lipgloss/compare/v0.13.0...v1.0.0)

---
updated-dependencies:
- dependency-name: github.com/charmbracelet/bubbletea
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: google.golang.org/protobuf
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: github.com/charmbracelet/lipgloss
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-01-16 15:03:22 +00:00
Jamal Cao
7e0a338be5 tui: added a terminal user interface (TUI) for managing gittuf policy 
Signed-off-by: Jamal Cao <jamaltheodds@gmail.com>
 2025-01-15 11:32:09 -05:00
dependabot[bot]
4c04960e32
chore(deps): bump github.com/ProtonMail/go-crypto in the all group 
Bumps the all group with 1 update: [github.com/ProtonMail/go-crypto](https://github.com/ProtonMail/go-crypto).


Updates `github.com/ProtonMail/go-crypto` from 1.1.4 to 1.1.5
- [Release notes](https://github.com/ProtonMail/go-crypto/releases)
- [Commits](https://github.com/ProtonMail/go-crypto/compare/v1.1.4...v1.1.5)

---
updated-dependencies:
- dependency-name: github.com/ProtonMail/go-crypto
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-01-15 14:17:14 +00:00
dependabot[bot]
a30f262f03
chore(deps): bump github.com/sigstore/protobuf-specs in the all group 
Bumps the all group with 1 update: [github.com/sigstore/protobuf-specs](https://github.com/sigstore/protobuf-specs).


Updates `github.com/sigstore/protobuf-specs` from 0.3.2 to 0.3.3
- [Release notes](https://github.com/sigstore/protobuf-specs/releases)
- [Changelog](https://github.com/sigstore/protobuf-specs/blob/main/CHANGELOG.md)
- [Commits](https://github.com/sigstore/protobuf-specs/compare/v0.3.2...v0.3.3)

---
updated-dependencies:
- dependency-name: github.com/sigstore/protobuf-specs
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-01-10 14:32:09 +00:00
dependabot[bot]
4e84c77074
chore(deps): bump github.com/sigstore/sigstore in the all group 
Bumps the all group with 1 update: [github.com/sigstore/sigstore](https://github.com/sigstore/sigstore).


Updates `github.com/sigstore/sigstore` from 1.8.11 to 1.8.12
- [Release notes](https://github.com/sigstore/sigstore/releases)
- [Commits](https://github.com/sigstore/sigstore/compare/v1.8.11...v1.8.12)

---
updated-dependencies:
- dependency-name: github.com/sigstore/sigstore
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-01-09 15:08:35 +00:00
dependabot[bot]
13e7aa1ec3
chore(deps): bump the all group with 3 updates 
Bumps the all group with 3 updates: [github.com/ProtonMail/go-crypto](https://github.com/ProtonMail/go-crypto), [golang.org/x/crypto](https://github.com/golang/crypto) and google.golang.org/protobuf.


Updates `github.com/ProtonMail/go-crypto` from 1.1.3 to 1.1.4
- [Release notes](https://github.com/ProtonMail/go-crypto/releases)
- [Commits](https://github.com/ProtonMail/go-crypto/compare/v1.1.3...v1.1.4)

Updates `golang.org/x/crypto` from 0.31.0 to 0.32.0
- [Commits](https://github.com/golang/crypto/compare/v0.31.0...v0.32.0)

Updates `google.golang.org/protobuf` from 1.36.1 to 1.36.2

---
updated-dependencies:
- dependency-name: github.com/ProtonMail/go-crypto
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: golang.org/x/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: google.golang.org/protobuf
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-01-07 14:08:22 +00:00
dependabot[bot]
96ebb13f8a
chore(deps): bump github.com/sigstore/gitsign in the all group 
Bumps the all group with 1 update: [github.com/sigstore/gitsign](https://github.com/sigstore/gitsign).


Updates `github.com/sigstore/gitsign` from 0.11.0 to 0.12.0
- [Release notes](https://github.com/sigstore/gitsign/releases)
- [Changelog](https://github.com/sigstore/gitsign/blob/main/.goreleaser.yaml)
- [Commits](https://github.com/sigstore/gitsign/compare/v0.11.0...v0.12.0)

---
updated-dependencies:
- dependency-name: github.com/sigstore/gitsign
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-01-06 14:29:07 +00:00
dependabot[bot]
2fb0cd119c
chore(deps): bump github.com/go-git/go-git/v5 in the all group 
Bumps the all group with 1 update: [github.com/go-git/go-git/v5](https://github.com/go-git/go-git).


Updates `github.com/go-git/go-git/v5` from 5.13.0 to 5.13.1
- [Release notes](https://github.com/go-git/go-git/releases)
- [Commits](https://github.com/go-git/go-git/compare/v5.13.0...v5.13.1)

---
updated-dependencies:
- dependency-name: github.com/go-git/go-git/v5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-01-03 14:23:28 +00:00
dependabot[bot]
3bf44f65c6
chore(deps): bump github.com/jonboulle/clockwork in the all group 
Bumps the all group with 1 update: [github.com/jonboulle/clockwork](https://github.com/jonboulle/clockwork).


Updates `github.com/jonboulle/clockwork` from 0.4.0 to 0.5.0
- [Release notes](https://github.com/jonboulle/clockwork/releases)
- [Commits](https://github.com/jonboulle/clockwork/compare/v0.4.0...v0.5.0)

---
updated-dependencies:
- dependency-name: github.com/jonboulle/clockwork
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-01-02 14:44:48 +00:00
dependabot[bot]
95cc04d291
chore(deps): bump github.com/go-git/go-git/v5 in the all group 
Bumps the all group with 1 update: [github.com/go-git/go-git/v5](https://github.com/go-git/go-git).


Updates `github.com/go-git/go-git/v5` from 5.12.0 to 5.13.0
- [Release notes](https://github.com/go-git/go-git/releases)
- [Commits](https://github.com/go-git/go-git/compare/v5.12.0...v5.13.0)

---
updated-dependencies:
- dependency-name: github.com/go-git/go-git/v5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-12-30 14:26:10 +00:00
Aditya Sirish
25ac5b5f65
Update dependencies 
There was a strange error from dependabot, claiming it couldn't generate
a PR. This commit manually bumps several dependencies.

Signed-off-by: Aditya Sirish <aditya@saky.in>
 2024-12-24 17:08:31 -05:00
dependabot[bot]
2ee3b1c19d
chore(deps): bump google.golang.org/protobuf in the all group 
Bumps the all group with 1 update: google.golang.org/protobuf.


Updates `google.golang.org/protobuf` from 1.36.0 to 1.36.1

---
updated-dependencies:
- dependency-name: google.golang.org/protobuf
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-12-23 14:52:55 +00:00
dependabot[bot]
9d251629d9
chore(deps): bump google.golang.org/protobuf in the all group 
Bumps the all group with 1 update: google.golang.org/protobuf.


Updates `google.golang.org/protobuf` from 1.35.2 to 1.36.0

---
updated-dependencies:
- dependency-name: google.golang.org/protobuf
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-12-17 14:42:11 +00:00
dependabot[bot]
0732958971
chore(deps): bump github.com/sigstore/sigstore in the all group 
Bumps the all group with 1 update: [github.com/sigstore/sigstore](https://github.com/sigstore/sigstore).


Updates `github.com/sigstore/sigstore` from 1.8.10 to 1.8.11
- [Release notes](https://github.com/sigstore/sigstore/releases)
- [Commits](https://github.com/sigstore/sigstore/compare/v1.8.10...v1.8.11)

---
updated-dependencies:
- dependency-name: github.com/sigstore/sigstore
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-12-16 14:36:00 +00:00
dependabot[bot]
328f6c03a0
chore(deps): bump github.com/secure-systems-lab/go-securesystemslib 
Bumps the all group with 1 update: [github.com/secure-systems-lab/go-securesystemslib](https://github.com/secure-systems-lab/go-securesystemslib).


Updates `github.com/secure-systems-lab/go-securesystemslib` from 0.8.1-0.20240108171218-da429971be5a to 0.9.0
- [Release notes](https://github.com/secure-systems-lab/go-securesystemslib/releases)
- [Commits](https://github.com/secure-systems-lab/go-securesystemslib/commits/v0.9.0)

---
updated-dependencies:
- dependency-name: github.com/secure-systems-lab/go-securesystemslib
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-12-13 14:53:08 +00:00
dependabot[bot]
ab1feb4759
chore(deps): bump golang.org/x/crypto from 0.30.0 to 0.31.0 
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.30.0 to 0.31.0.
- [Commits](https://github.com/golang/crypto/compare/v0.30.0...v0.31.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-12-12 13:26:55 +00:00
dependabot[bot]
aebde38791
chore(deps): bump golang.org/x/crypto in the all group 
Bumps the all group with 1 update: [golang.org/x/crypto](https://github.com/golang/crypto).


Updates `golang.org/x/crypto` from 0.29.0 to 0.30.0
- [Commits](https://github.com/golang/crypto/compare/v0.29.0...v0.30.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-12-05 14:17:36 +00:00
dependabot[bot]
697e917602
chore(deps): bump the all group with 2 updates 
Bumps the all group with 2 updates: [github.com/ProtonMail/go-crypto](https://github.com/ProtonMail/go-crypto) and [github.com/stretchr/testify](https://github.com/stretchr/testify).


Updates `github.com/ProtonMail/go-crypto` from 1.1.2 to 1.1.3
- [Release notes](https://github.com/ProtonMail/go-crypto/releases)
- [Commits](https://github.com/ProtonMail/go-crypto/compare/v1.1.2...v1.1.3)

Updates `github.com/stretchr/testify` from 1.9.0 to 1.10.0
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](https://github.com/stretchr/testify/compare/v1.9.0...v1.10.0)

---
updated-dependencies:
- dependency-name: github.com/ProtonMail/go-crypto
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: github.com/stretchr/testify
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-11-25 15:12:39 +00:00
dependabot[bot]
d5e63acf43
chore(deps): bump google.golang.org/protobuf in the all group 
Bumps the all group with 1 update: google.golang.org/protobuf.


Updates `google.golang.org/protobuf` from 1.35.1 to 1.35.2

---
updated-dependencies:
- dependency-name: google.golang.org/protobuf
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-11-14 14:42:54 +00:00
dependabot[bot]
e092a1774f
chore(deps): bump github.com/ProtonMail/go-crypto in the all group 
Bumps the all group with 1 update: [github.com/ProtonMail/go-crypto](https://github.com/ProtonMail/go-crypto).


Updates `github.com/ProtonMail/go-crypto` from 1.1.1 to 1.1.2
- [Release notes](https://github.com/ProtonMail/go-crypto/releases)
- [Commits](https://github.com/ProtonMail/go-crypto/compare/v1.1.1...v1.1.2)

---
updated-dependencies:
- dependency-name: github.com/ProtonMail/go-crypto
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-11-11 15:27:36 +00:00
dependabot[bot]
c91ad053d4
chore(deps): bump the all group with 2 updates 
Bumps the all group with 2 updates: [github.com/ProtonMail/go-crypto](https://github.com/ProtonMail/go-crypto) and [golang.org/x/crypto](https://github.com/golang/crypto).


Updates `github.com/ProtonMail/go-crypto` from 1.0.0 to 1.1.1
- [Release notes](https://github.com/ProtonMail/go-crypto/releases)
- [Commits](https://github.com/ProtonMail/go-crypto/compare/v1.0.0...v1.1.1)

Updates `golang.org/x/crypto` from 0.28.0 to 0.29.0
- [Commits](https://github.com/golang/crypto/compare/v0.28.0...v0.29.0)

---
updated-dependencies:
- dependency-name: github.com/ProtonMail/go-crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: golang.org/x/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-11-08 14:20:40 +00:00
dependabot[bot]
53a4feda9f
chore(deps): bump github.com/sigstore/gitsign in the all group 
Bumps the all group with 1 update: [github.com/sigstore/gitsign](https://github.com/sigstore/gitsign).


Updates `github.com/sigstore/gitsign` from 0.10.3-0.20241016191048-aa71ea860646 to 0.11.0
- [Release notes](https://github.com/sigstore/gitsign/releases)
- [Changelog](https://github.com/sigstore/gitsign/blob/main/.goreleaser.yaml)
- [Commits](https://github.com/sigstore/gitsign/commits/v0.11.0)

---
updated-dependencies:
- dependency-name: github.com/sigstore/gitsign
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-10-24 14:28:48 +00:00
Aditya Sirish A Yelgundhalli
a3fedc1524
sigstore: Add support for private sigstore instances 
Signed-off-by: Aditya Sirish A Yelgundhalli <ayelgundhall@bloomberg.net>
 2024-10-16 15:14:38 -04:00
dependabot[bot]
9192a06ff8
chore(deps): bump github.com/sigstore/sigstore in the all group 
Bumps the all group with 1 update: [github.com/sigstore/sigstore](https://github.com/sigstore/sigstore).


Updates `github.com/sigstore/sigstore` from 1.8.9 to 1.8.10
- [Release notes](https://github.com/sigstore/sigstore/releases)
- [Commits](https://github.com/sigstore/sigstore/compare/v1.8.9...v1.8.10)

---
updated-dependencies:
- dependency-name: github.com/sigstore/sigstore
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-10-15 14:43:08 +00:00
dependabot[bot]
b84daac7a2
chore(deps): bump the all group with 2 updates 
Bumps the all group with 2 updates: [github.com/sigstore/sigstore-go](https://github.com/sigstore/sigstore-go) and [github.com/theupdateframework/go-tuf/v2](https://github.com/theupdateframework/go-tuf).


Updates `github.com/sigstore/sigstore-go` from 0.6.1 to 0.6.2
- [Release notes](https://github.com/sigstore/sigstore-go/releases)
- [Commits](https://github.com/sigstore/sigstore-go/compare/v0.6.1...v0.6.2)

Updates `github.com/theupdateframework/go-tuf/v2` from 2.0.1 to 2.0.2
- [Release notes](https://github.com/theupdateframework/go-tuf/releases)
- [Changelog](https://github.com/theupdateframework/go-tuf/blob/master/.goreleaser.yaml)
- [Commits](https://github.com/theupdateframework/go-tuf/compare/v2.0.1...v2.0.2)

---
updated-dependencies:
- dependency-name: github.com/sigstore/sigstore-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: github.com/theupdateframework/go-tuf/v2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-10-11 14:51:55 +00:00
Aditya Sirish A Yelgundhalli
f1473c53e5
*: Add sigstore signer for metadata 
Signed-off-by: Aditya Sirish A Yelgundhalli <ayelgundhall@bloomberg.net>
 2024-10-09 16:13:01 -04:00
dependabot[bot]
f942faccf3
chore(deps): bump the all group with 2 updates 
Bumps the all group with 2 updates: [golang.org/x/crypto](https://github.com/golang/crypto) and google.golang.org/protobuf.


Updates `golang.org/x/crypto` from 0.27.0 to 0.28.0
- [Commits](https://github.com/golang/crypto/compare/v0.27.0...v0.28.0)

Updates `google.golang.org/protobuf` from 1.34.2 to 1.35.1

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: google.golang.org/protobuf
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-10-07 14:57:58 +00:00
dependabot[bot]
8d16c5e326
chore(deps): bump github.com/sigstore/cosign/v2 in the all group 
Bumps the all group with 1 update: [github.com/sigstore/cosign/v2](https://github.com/sigstore/cosign).


Updates `github.com/sigstore/cosign/v2` from 2.4.0 to 2.4.1
- [Release notes](https://github.com/sigstore/cosign/releases)
- [Changelog](https://github.com/sigstore/cosign/blob/main/CHANGELOG.md)
- [Commits](https://github.com/sigstore/cosign/compare/v2.4.0...v2.4.1)

---
updated-dependencies:
- dependency-name: github.com/sigstore/cosign/v2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-10-04 14:19:20 +00:00
dependabot[bot]
6a4b53f108
chore(deps): bump golang.org/x/crypto in the all group 
Bumps the all group with 1 update: [golang.org/x/crypto](https://github.com/golang/crypto).


Updates `golang.org/x/crypto` from 0.26.0 to 0.27.0
- [Commits](https://github.com/golang/crypto/compare/v0.26.0...v0.27.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-09-06 14:39:42 +00:00
dependabot[bot]
d3db99969e
chore(deps): bump github.com/sigstore/sigstore in the all group 
Bumps the all group with 1 update: [github.com/sigstore/sigstore](https://github.com/sigstore/sigstore).


Updates `github.com/sigstore/sigstore` from 1.8.8 to 1.8.9
- [Release notes](https://github.com/sigstore/sigstore/releases)
- [Commits](https://github.com/sigstore/sigstore/compare/v1.8.8...v1.8.9)

---
updated-dependencies:
- dependency-name: github.com/sigstore/sigstore
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-09-04 14:55:14 +00:00
dependabot[bot]
858820de16
chore(deps): bump github.com/docker/docker 
Bumps [github.com/docker/docker](https://github.com/docker/docker) from 26.1.4+incompatible to 26.1.5+incompatible.
- [Release notes](https://github.com/docker/docker/releases)
- [Commits](https://github.com/docker/docker/compare/v26.1.4...v26.1.5)

---
updated-dependencies:
- dependency-name: github.com/docker/docker
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-08-09 19:15:52 +00:00
dependabot[bot]
85a3c7201b
chore(deps): bump github.com/sigstore/cosign/v2 from 2.3.0 to 2.4.0 
Bumps [github.com/sigstore/cosign/v2](https://github.com/sigstore/cosign) from 2.3.0 to 2.4.0.
- [Release notes](https://github.com/sigstore/cosign/releases)
- [Changelog](https://github.com/sigstore/cosign/blob/main/CHANGELOG.md)
- [Commits](https://github.com/sigstore/cosign/compare/v2.3.0...v2.4.0)

---
updated-dependencies:
- dependency-name: github.com/sigstore/cosign/v2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-08-07 15:36:42 +00:00
dependabot[bot]
bdebbc169a
chore(deps): bump golang.org/x/crypto from 0.25.0 to 0.26.0 
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.25.0 to 0.26.0.
- [Commits](https://github.com/golang/crypto/compare/v0.25.0...v0.26.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-08-07 14:36:39 +00:00
dependabot[bot]
116b28d2b3
chore(deps): bump github.com/docker/docker 
Bumps [github.com/docker/docker](https://github.com/docker/docker) from 24.0.9+incompatible to 26.1.4+incompatible.
- [Release notes](https://github.com/docker/docker/releases)
- [Commits](https://github.com/docker/docker/compare/v24.0.9...v26.1.4)

---
updated-dependencies:
- dependency-name: github.com/docker/docker
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-07-30 11:35:42 +00:00
dependabot[bot]
4f4ef3db23
chore(deps): bump github.com/sigstore/cosign/v2 from 2.2.4 to 2.3.0 
Bumps [github.com/sigstore/cosign/v2](https://github.com/sigstore/cosign) from 2.2.4 to 2.3.0.
- [Release notes](https://github.com/sigstore/cosign/releases)
- [Changelog](https://github.com/sigstore/cosign/blob/main/CHANGELOG.md)
- [Commits](https://github.com/sigstore/cosign/compare/v2.2.4...v2.3.0)

---
updated-dependencies:
- dependency-name: github.com/sigstore/cosign/v2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-07-23 14:21:15 +00:00