Skip to content

chore(deps): bump sigstore/gh-action-sigstore-python from 3.4.0 to 3.5.0 - #732

Merged
bosd merged 1 commit into
masterfrom
dependabot/github_actions/sigstore/gh-action-sigstore-python-3.5.0
Aug 4, 2026
Merged

chore(deps): bump sigstore/gh-action-sigstore-python from 3.4.0 to 3.5.0#732
bosd merged 1 commit into
masterfrom
dependabot/github_actions/sigstore/gh-action-sigstore-python-3.5.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 4, 2026

Copy link
Copy Markdown
Contributor

Bumps sigstore/gh-action-sigstore-python from 3.4.0 to 3.5.0.

Release notes

Sourced from sigstore/gh-action-sigstore-python's releases.

v3.5.0

What's Changed

  • The action now uses sigstore 4.5.0
  • Bump other dependencies

Full Changelog: sigstore/gh-action-sigstore-python@v3.4.0...v3.5.0

Commits
  • 790bc6b build(deps): bump github/codeql-action/upload-sarif in the actions group (#445)
  • 513a149 build(deps): bump platformdirs in the python-dependencies group (#446)
  • 74e0040 Bump sigstore from 4.4 to 4.5 (#444)
  • 52538fd build(deps): bump the actions group across 1 directory with 4 updates (#439)
  • cbab91d build(deps): bump the python-dependencies group across 1 directory with 9 upd...
  • 1d3524c build(deps): bump softprops/action-gh-release from 3.0.1 to 3.0.2 in the acti...
  • a174484 build(deps): bump sigstore from 4.3.0 to 4.4.0 in the python-dependencies gro...
  • 0b384a6 build(deps): bump the actions group with 2 updates (#429)
  • f11d8f8 build(deps): bump typing-extensions in the python-dependencies group (#430)
  • 258577b build(deps): bump the python-dependencies group with 2 updates (#428)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Aug 4, 2026
@github-actions

github-actions Bot commented Aug 4, 2026

Copy link
Copy Markdown

Coverage report

This PR does not seem to contain any modification to coverable code.

@dependabot
dependabot Bot force-pushed the dependabot/github_actions/sigstore/gh-action-sigstore-python-3.5.0 branch 2 times, most recently from 86f3087 to 585a92c Compare August 4, 2026 08:58
@bosd

bosd commented Aug 4, 2026

Copy link
Copy Markdown
Collaborator

@dependabot rebase

Bumps [sigstore/gh-action-sigstore-python](https://github.com/sigstore/gh-action-sigstore-python) from 3.4.0 to 3.5.0.
- [Release notes](https://github.com/sigstore/gh-action-sigstore-python/releases)
- [Changelog](https://github.com/sigstore/gh-action-sigstore-python/blob/main/CHANGELOG.md)
- [Commits](sigstore/gh-action-sigstore-python@5b79a39...790bc6b)

---
updated-dependencies:
- dependency-name: sigstore/gh-action-sigstore-python
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/sigstore/gh-action-sigstore-python-3.5.0 branch from 585a92c to e7089e5 Compare August 4, 2026 09:07
@bosd
bosd merged commit bd2fcce into master Aug 4, 2026
15 checks passed
@bosd
bosd deleted the dependabot/github_actions/sigstore/gh-action-sigstore-python-3.5.0 branch August 4, 2026 09:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant