Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

build(deps): bump theupdateframework/tuf-on-ci from 0.13.0 to 0.14.0 in the actions group #307

Merged
merged 1 commit into from
Dec 3, 2024

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 3, 2024

Bumps the actions group with 1 update: theupdateframework/tuf-on-ci.

Updates theupdateframework/tuf-on-ci from 0.13.0 to 0.14.0

Release notes

Sourced from theupdateframework/tuf-on-ci's releases.

v0.14.0

  • Updates the status page to include expiration time for metadata (#431)
  • Compatibility updates for tuf-on-ci-sign, now runs on Python 3.9 (default macOS Python version) (#433)
  • Performance improvements to the signing-event action (#469)
  • Dependency updates
Changelog

Sourced from theupdateframework/tuf-on-ci's changelog.

Changelog

Unreleased

v0.14.0

  • Updates the status page to include expiration time for metadata (#431)
  • Compatibility updates for tuf-on-ci-sign, now runs on Python 3.9 (#433)
  • Performance improvements to the signing-event action (#469)
  • Dependency updates

v0.13.0

  • Accept usernames without @ in .tuf-on-ci-sign.ini (#415)
  • Add workaround for Sigstore root-signing migration (#422)
  • Dependency updates

v0.12.0

In addition to dependency updates, this release contains one new (experimental) repository feature: Online signed targets. Updating to this version does not require any changes to GitHub workflow files.

The Online signed targets feature (#75) currently has some significant limitations and may be changed in the future, see DELEGATION-MANUAL.md for details.

v0.11.0

This release contains bug fixes, stability fixes and dependency updates.

Updating to this version does not require any changes to GitHub workflow files.

Changes

  • Increased the number of root rotations allowed in the client unsed by the test workflow (#377)
  • Versioned root metadata file is now created by the signing event (#352)

Fixes

  • TUF key ids are now updated only when the repository is successfully imported (#358)
  • Relative links in published TUF repository state are now correct (#354)

v0.10.0

Release includes several new features. It also fixes an issue with TUF keyids,

... (truncated)

Commits
  • fce107e Merge pull request #482 from theupdateframework/release-prep/v0.14.0
  • 969a6cc Updated release notes to include #433
  • 8070c42 Prepare for v0.14.0 release:
  • ac1e1de Merge pull request #433 from jku/enable-python-3.9
  • b0d6f7b signer: Downgrade code to python 3.9
  • f332ecd docs: Do not talk about forking template (#481)
  • 273750e repo: Update pinned requirements (#478)
  • 81945b9 build(deps): bump hatchling in /build in the build-dependencies group (#476)
  • 1de5170 repo: Update pinned requirements (#475)
  • c30a1f0 build(deps): bump hatchling in /build in the build-dependencies group (#471)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the actions group with 1 update: [theupdateframework/tuf-on-ci](https://github.com/theupdateframework/tuf-on-ci).


Updates `theupdateframework/tuf-on-ci` from 0.13.0 to 0.14.0
- [Release notes](https://github.com/theupdateframework/tuf-on-ci/releases)
- [Changelog](https://github.com/theupdateframework/tuf-on-ci/blob/main/docs/CHANGELOG.md)
- [Commits](theupdateframework/tuf-on-ci@27c49c0...fce107e)

---
updated-dependencies:
- dependency-name: theupdateframework/tuf-on-ci
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Dec 3, 2024
@cpanato cpanato merged commit 4282914 into main Dec 3, 2024
3 checks passed
@dependabot dependabot bot deleted the dependabot/github_actions/actions-29fff29e66 branch December 3, 2024 01:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant