Update all dependencies
This MR contains the following updates:
Package | Change | Age | Adoption | Passing | Confidence | Type | Update |
---|---|---|---|---|---|---|---|
boto3 |
==1.24.58 -> ==1.24.59
|
patch | |||||
sigstore/cosign |
v1.11.0 -> v1.11.1
|
ironbank-github | patch |
Release Notes
boto/boto3
v1.24.59
=======
- api-change:
cloudfront
: [botocore
] Adds support for CloudFront origin access control (OAC), making it possible to restrict public access to S3 bucket origins in all AWS Regions, those with SSE-KMS, and more. - api-change:
config
: [botocore
] AWS Config now supports ConformancePackTemplate documents in SSM Docs for the deployment and update of conformance packs. - api-change:
iam
: [botocore
] Documentation updates for AWS Identity and Access Management (IAM). - api-change:
ivs
: [botocore
] Documentation Change for IVS API Reference - Doc-only update to type field description for CreateChannel and UpdateChannel actions and for Channel data type. Also added Amazon Resource Names (ARNs) paragraph to Welcome section. - api-change:
quicksight
: [botocore
] Added a new optional property DashboardVisual under ExperienceConfiguration parameter of GenerateEmbedUrlForAnonymousUser and GenerateEmbedUrlForRegisteredUser API operations. This supports embedding of specific visuals in QuickSight dashboards. - api-change:
transfer
: [botocore
] Documentation updates for AWS Transfer Family
sigstore/cosign
v1.11.1
What's Changed
- add stale workflow using the workflow template by @cpanato in https://github.com/sigstore/cosign/pull/2175
- Update Scorecard action to v2:alpha by @azeemshaikh38 in https://github.com/sigstore/cosign/pull/2177
- add release cadence section in the readme by @cpanato in https://github.com/sigstore/cosign/pull/2179
- bump scaffold in tests to use release v0.4.5 by @cpanato in https://github.com/sigstore/cosign/pull/2180
- Bump github.com/sigstore/rekor from 0.10.0 to 0.11.0 by @dependabot in https://github.com/sigstore/cosign/pull/2181
- Bump google.golang.org/api from 0.92.0 to 0.93.0 by @dependabot in https://github.com/sigstore/cosign/pull/2183
- Bump github.com/go-openapi/swag from 0.22.1 to 0.22.3 by @dependabot in https://github.com/sigstore/cosign/pull/2182
- Bump github/codeql-action from 2.1.18 to 2.1.19 by @dependabot in https://github.com/sigstore/cosign/pull/2184
- Bump actions/dependency-review-action from 2.0.4 to 2.1.0 by @dependabot in https://github.com/sigstore/cosign/pull/2185
- bump fulcio dep to 0.5.2 by @k4leung4 in https://github.com/sigstore/cosign/pull/2176
- feat: Rework fig autocomplete command by @dirien in https://github.com/sigstore/cosign/pull/2187
- Bump github.com/sigstore/fulcio from 0.5.2 to 0.5.3 by @dependabot in https://github.com/sigstore/cosign/pull/2190
- Bump github.com/xanzy/go-gitlab from 0.72.0 to 0.73.0 by @dependabot in https://github.com/sigstore/cosign/pull/2191
- Bump github/codeql-action from 2.1.19 to 2.1.20 by @dependabot in https://github.com/sigstore/cosign/pull/2193
- Bump actions/cache from 3.0.7 to 3.0.8 by @dependabot in https://github.com/sigstore/cosign/pull/2192
- Bump github.com/xanzy/go-gitlab from 0.73.0 to 0.73.1 by @dependabot in https://github.com/sigstore/cosign/pull/2195
- Bump actions/setup-go from 3.2.1 to 3.3.0 by @dependabot in https://github.com/sigstore/cosign/pull/2196
- fix: fix typo that caused attestation verification failure by @asraa in https://github.com/sigstore/cosign/pull/2199
Full Changelog: https://github.com/sigstore/cosign/compare/v1.11.0...v1.11.1
Thanks to all contributors!
Configuration
-
If you want to rebase/retry this MR, click this checkbox.
This MR has been generated by Renovate Bot.