Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Oct 21, 2025

This PR contains the following updates:

Package Type Update Change
sigstore/gh-action-sigstore-python action minor v3.0.1 -> v3.1.0

Release Notes

sigstore/gh-action-sigstore-python (sigstore/gh-action-sigstore-python)

v3.1.0

Compare Source

gh-action-sigstore-python is now compatible with Rekor v2
transparency log (but produced signature bundles still contain Rekor v1 entries by default).

Changed
  • The action now uses sigstore-python 4.1. All other dependencies are also updated
    (#​220)
Fixed
  • Fixed incompatibility with Python 3.14 by upgrading dependencies
    (#​225)
Added
  • rekor-version argument was added to control the Rekor transparency log
    version when signing. The default version in the gh-action-sigstore-python
    3.x series will remain 1 (except when using staging: true).
    (#​228)

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant