Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Nov 24, 2025

This PR contains the following updates:

Package Type Update Change
sigstore/gh-action-sigstore-python action minor v3.0.0 -> v3.2.0

Release Notes

sigstore/gh-action-sigstore-python (sigstore/gh-action-sigstore-python)

v3.2.0

Compare Source

gh-action-sigstore-python action now manages the used Python version internally, improving reliability.

Changed
  • Manage Python version internally (#​242, #​258)
  • Dependency updates

v3.1.0

Compare Source

gh-action-sigstore-python is now compatible with Rekor v2
transparency log (but produced signature bundles still contain Rekor v1 entries by default).

Changed
  • The action now uses sigstore-python 4.1. All other dependencies are also updated
    (#​220)
Fixed
  • Fixed incompatibility with Python 3.14 by upgrading dependencies
    (#​225)
Added
  • rekor-version argument was added to control the Rekor transparency log
    version when signing. The default version in the gh-action-sigstore-python
    3.x series will remain 1 (except when using staging: true).
    (#​228)

v3.0.1

Compare Source

Changed
  • The minimum Python version supported by this action is now 3.9
    (#​155)
  • The action's Python dependencies are now fully pinned to specific versions
    (#​165)
Fixed
  • The rfc3161-client dependency has been upgraded to 1.0.3 to resolve
    a security vulnerability
    (#​182)

Configuration

📅 Schedule: Branch creation - "after 7am and before 4pm on monday" in timezone Europe/London, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@codecov
Copy link

codecov bot commented Nov 24, 2025

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 38.51%. Comparing base (c02c9da) to head (0540754).
⚠️ Report is 9 commits behind head on main.

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #698   +/-   ##
=======================================
  Coverage   38.51%   38.51%           
=======================================
  Files          99       99           
  Lines       11663    11663           
  Branches     1542     1542           
=======================================
  Hits         4492     4492           
  Misses       6973     6973           
  Partials      198      198           
🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@renovate renovate bot force-pushed the renovate/sigstore-gh-action-sigstore-python-3.x branch from 8bcb84d to 0540754 Compare December 5, 2025 05:28
@renovate renovate bot changed the title Update sigstore/gh-action-sigstore-python action to v3.1.0 Update sigstore/gh-action-sigstore-python action to v3.2.0 Dec 5, 2025
@stephen-riggs stephen-riggs merged commit b5dfe2f into main Dec 8, 2025
18 checks passed
@stephen-riggs stephen-riggs deleted the renovate/sigstore-gh-action-sigstore-python-3.x branch December 8, 2025 12:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants