Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [github.com/coreos/go-oidc/v3](https://redirect.github.com/coreos/go-oidc) | `v3.10.0` -> `v3.11.0` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | [github.com/sigstore/cosign/v2](https://redirect.github.com/sigstore/cosign) | `v2.2.4` -> `v2.4.1` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | [github.com/sigstore/sigstore](https://redirect.github.com/sigstore/sigstore) | `v1.8.3` -> `v1.8.10` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | [github.com/spf13/cobra](https://redirect.github.com/spf13/cobra) | `v1.8.0` -> `v1.8.1` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>coreos/go-oidc (github.com/coreos/go-oidc/v3)</summary> ### [`v3.11.0`](https://redirect.github.com/coreos/go-oidc/releases/tag/v3.11.0) [Compare Source](https://redirect.github.com/coreos/go-oidc/compare/v3.10.0...v3.11.0) #### What's Changed - oidc: verify support for algs from discovery by [@​ericchiang](https://redirect.github.com/ericchiang) in [https://github.com/coreos/go-oidc/pull/430](https://redirect.github.com/coreos/go-oidc/pull/430) - chore(deps): bump dependencies to address security issues by [@​clambin](https://redirect.github.com/clambin) in [https://github.com/coreos/go-oidc/pull/432](https://redirect.github.com/coreos/go-oidc/pull/432) - oidc: ignore cancellation of remote key set context by [@​ericchiang](https://redirect.github.com/ericchiang) in [https://github.com/coreos/go-oidc/pull/433](https://redirect.github.com/coreos/go-oidc/pull/433) #### New Contributors - [@​clambin](https://redirect.github.com/clambin) made their first contribution in [https://github.com/coreos/go-oidc/pull/432](https://redirect.github.com/coreos/go-oidc/pull/432) **Full Changelog**: coreos/go-oidc@v3.10.0...v3.11.0 </details> <details> <summary>sigstore/cosign (github.com/sigstore/cosign/v2)</summary> ### [`v2.4.1`](https://redirect.github.com/sigstore/cosign/blob/HEAD/CHANGELOG.md#v241) [Compare Source](https://redirect.github.com/sigstore/cosign/compare/v2.4.0...v2.4.1) v2.4.1 largely contains bug fixes and updates dependencies. #### Features - Added fuzzing coverage to multiple packages #### Bug Fixes - Fix bug in attest-blob when using a timestamp authority with new bundles ([#​3877](https://redirect.github.com/sigstore/cosign/issues/3877)) - fix: documentation link for installation guide ([#​3884](https://redirect.github.com/sigstore/cosign/issues/3884)) #### Contributors - AdamKorcz - Bob Callaway - Carlos Tadeu Panato Junior - Hayden B - Hemil K - Sota Sugiura - Zach Steindler ### [`v2.4.0`](https://redirect.github.com/sigstore/cosign/blob/HEAD/CHANGELOG.md#v240) [Compare Source](https://redirect.github.com/sigstore/cosign/compare/v2.3.0...v2.4.0) v2.4.0 begins the modernization of the Cosign client, which includes: - Support for the newer Sigstore specification-compliant bundle format - Support for providing trust roots (e.g. Fulcio certificates, Rekor keys) through a trust root file, instead of many different flags - Conformance test suite integration to verify signing and verification behavior In future updates, we'll include: - General support for the trust root file, instead of only when using the bundle format during verification - Simplification of trust root flags and deprecation of the Cosign-specific bundle format - Bundle support with container signing We have also moved nightly Cosign container builds to GHCR instead of GCR. #### Features - Add new bundle support to `verify-blob` and `verify-blob-attestation` ([#​3796](https://redirect.github.com/sigstore/cosign/issues/3796)) - Adding protobuf bundle support to sign-blob and attest-blob ([#​3752](https://redirect.github.com/sigstore/cosign/issues/3752)) - Bump sigstore/sigstore to support `email_verified` as string or boolean ([#​3819](https://redirect.github.com/sigstore/cosign/issues/3819)) - Conformance testing for cosign ([#​3806](https://redirect.github.com/sigstore/cosign/issues/3806)) - move incremental builds per commit to GHCR instead of GCR ([#​3808](https://redirect.github.com/sigstore/cosign/issues/3808)) - Add support for recording creation timestamp for cosign attest ([#​3797](https://redirect.github.com/sigstore/cosign/issues/3797)) - Include SCT verification failure details in error message ([#​3799](https://redirect.github.com/sigstore/cosign/issues/3799)) #### Contributors - Bob Callaway - Hayden B - Slavek Kabrda - Zach Steindler - Zsolt Horvath ### [`v2.3.0`](https://redirect.github.com/sigstore/cosign/blob/HEAD/CHANGELOG.md#v230) [Compare Source](https://redirect.github.com/sigstore/cosign/compare/v2.2.4...v2.3.0) #### Features - Add PayloadProvider interface to decouple AttestationToPayloadJSON from oci.Signature interface ([#​3693](https://redirect.github.com/sigstore/cosign/issues/3693)) - add registry options to cosign save ([#​3645](https://redirect.github.com/sigstore/cosign/issues/3645)) - Add debug providers command. ([#​3728](https://redirect.github.com/sigstore/cosign/issues/3728)) - Make config layers in ociremote mountable ([#​3741](https://redirect.github.com/sigstore/cosign/issues/3741)) - upgrade to go1.22 ([#​3739](https://redirect.github.com/sigstore/cosign/issues/3739)) - adds tsa cert chain check for env var or tuf targets. ([#​3600](https://redirect.github.com/sigstore/cosign/issues/3600)) - add --ca-roots and --ca-intermediates flags to 'cosign verify' ([#​3464](https://redirect.github.com/sigstore/cosign/issues/3464)) - add handling of keyless verification for all verify commands ([#​3761](https://redirect.github.com/sigstore/cosign/issues/3761)) #### Bug Fixes - fix: close attestationFile ([#​3679](https://redirect.github.com/sigstore/cosign/issues/3679)) - Set `bundleVerified` to true after Rekor verification (Resolves [#​3740](https://redirect.github.com/sigstore/cosign/issues/3740)) ([#​3745](https://redirect.github.com/sigstore/cosign/issues/3745)) #### Documentation - Document ImportKeyPair and LoadPrivateKey functions in pkg/cosign ([#​3776](https://redirect.github.com/sigstore/cosign/issues/3776)) #### Testing - Refactor KMS E2E tests ([#​3684](https://redirect.github.com/sigstore/cosign/issues/3684)) - Remove sign_blob_test.sh test ([#​3707](https://redirect.github.com/sigstore/cosign/issues/3707)) - Remove KMS E2E test script ([#​3702](https://redirect.github.com/sigstore/cosign/issues/3702)) - Refactor insecure registry E2E tests ([#​3701](https://redirect.github.com/sigstore/cosign/issues/3701)) #### Contributors - Billy Lynch - bminahan73 - Bob Callaway - Carlos Tadeu Panato Junior - Cody Soyland - Colleen Murphy - Dmitry Savintsev - guangwu - Hayden B - Hector Fernandez - ian hundere - Jason Power - Jon Johnson - Max Lambrecht - Meeki1l </details> <details> <summary>sigstore/sigstore (github.com/sigstore/sigstore)</summary> ### [`v1.8.10`](https://redirect.github.com/sigstore/sigstore/releases/tag/v1.8.10) [Compare Source](https://redirect.github.com/sigstore/sigstore/compare/v1.8.9...v1.8.10) #### What's Changed - fix(kms): fix CreateKey may panic when using GCP KMS by [@​mozillazg](https://redirect.github.com/mozillazg) in [https://github.com/sigstore/sigstore/pull/1829](https://redirect.github.com/sigstore/sigstore/pull/1829) - update to go1.22.7 and ci job by [@​cpanato](https://redirect.github.com/cpanato) in [https://github.com/sigstore/sigstore/pull/1847](https://redirect.github.com/sigstore/sigstore/pull/1847) - Mark TUF client as deprecated by [@​haydentherapper](https://redirect.github.com/haydentherapper) in [https://github.com/sigstore/sigstore/pull/1858](https://redirect.github.com/sigstore/sigstore/pull/1858) - bump to go 1.22.8 by [@​cpanato](https://redirect.github.com/cpanato) in [https://github.com/sigstore/sigstore/pull/1865](https://redirect.github.com/sigstore/sigstore/pull/1865) and several dependencies updates #### New Contributors - [@​mozillazg](https://redirect.github.com/mozillazg) made their first contribution in [https://github.com/sigstore/sigstore/pull/1829](https://redirect.github.com/sigstore/sigstore/pull/1829) **Full Changelog**: sigstore/sigstore@v1.8.9...v1.8.10 ### [`v1.8.9`](https://redirect.github.com/sigstore/sigstore/releases/tag/v1.8.9) [Compare Source](https://redirect.github.com/sigstore/sigstore/compare/v1.8.8...v1.8.9) #### What's Changed - fuzzing: improve coverage by [@​AdamKorcz](https://redirect.github.com/AdamKorcz) in [https://github.com/sigstore/sigstore/pull/1809](https://redirect.github.com/sigstore/sigstore/pull/1809) - Deserialize [`ed25519`](https://redirect.github.com/sigstore/sigstore/commit/ed25519) keys from hashivault correctly by [@​stevenjohnstone](https://redirect.github.com/stevenjohnstone) in [https://github.com/sigstore/sigstore/pull/1811](https://redirect.github.com/sigstore/sigstore/pull/1811) - oauthflow: Add SubjectFromUnverifiedToken by [@​adityasaky](https://redirect.github.com/adityasaky) in [https://github.com/sigstore/sigstore/pull/1826](https://redirect.github.com/sigstore/sigstore/pull/1826) **Full Changelog**: sigstore/sigstore@v1.8.8...v1.8.9 ### [`v1.8.8`](https://redirect.github.com/sigstore/sigstore/releases/tag/v1.8.8) [Compare Source](https://redirect.github.com/sigstore/sigstore/compare/v1.8.7...v1.8.8) #### What's Changed - Fixes issue in Device access token request by [@​rishabhsvats](https://redirect.github.com/rishabhsvats) in [https://github.com/sigstore/sigstore/pull/1752](https://redirect.github.com/sigstore/sigstore/pull/1752) - Support email_verified as a String by [@​sabre1041](https://redirect.github.com/sabre1041) in [https://github.com/sigstore/sigstore/pull/1794](https://redirect.github.com/sigstore/sigstore/pull/1794) - Dependency updates **Full Changelog**: sigstore/sigstore@v1.8.7...v1.8.8 ### [`v1.8.7`](https://redirect.github.com/sigstore/sigstore/releases/tag/v1.8.7) [Compare Source](https://redirect.github.com/sigstore/sigstore/compare/v1.8.6...v1.8.7) Dependencies updates only #### What's Changed - build(deps): Bump the all group in /pkg/signature/kms/gcp with 2 updates by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/sigstore/sigstore/pull/1770](https://redirect.github.com/sigstore/sigstore/pull/1770) - build(deps): Bump the all group in /pkg/signature/kms/aws with 4 updates by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/sigstore/sigstore/pull/1769](https://redirect.github.com/sigstore/sigstore/pull/1769) - build(deps): Bump hashicorp/vault from 1.17.0 to 1.17.1 in /test/e2e in the all group by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/sigstore/sigstore/pull/1767](https://redirect.github.com/sigstore/sigstore/pull/1767) - build(deps): Bump github.com/sigstore/sigstore from 1.8.4 to 1.8.6 in /test/fuzz in the all group by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/sigstore/sigstore/pull/1768](https://redirect.github.com/sigstore/sigstore/pull/1768) - build(deps): Bump golang.org/x/crypto from 0.24.0 to 0.25.0 in /pkg/signature/kms/azure in the all group by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/sigstore/sigstore/pull/1772](https://redirect.github.com/sigstore/sigstore/pull/1772) - build(deps): Bump the all group across 1 directory with 2 updates by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/sigstore/sigstore/pull/1776](https://redirect.github.com/sigstore/sigstore/pull/1776) - build(deps): Bump actions/upload-artifact from 4.3.3 to 4.3.4 in the all group by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/sigstore/sigstore/pull/1771](https://redirect.github.com/sigstore/sigstore/pull/1771) - build(deps): Bump the all group in /pkg/signature/kms/gcp with 2 updates by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/sigstore/sigstore/pull/1773](https://redirect.github.com/sigstore/sigstore/pull/1773) - build(deps): Bump google.golang.org/grpc from 1.64.0 to 1.64.1 in /pkg/signature/kms/gcp by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/sigstore/sigstore/pull/1778](https://redirect.github.com/sigstore/sigstore/pull/1778) - build(deps): Bump the all group across 1 directory with 4 updates by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/sigstore/sigstore/pull/1777](https://redirect.github.com/sigstore/sigstore/pull/1777) **Full Changelog**: sigstore/sigstore@v1.8.6...v1.8.7 ### [`v1.8.6`](https://redirect.github.com/sigstore/sigstore/releases/tag/v1.8.6) [Compare Source](https://redirect.github.com/sigstore/sigstore/compare/v1.8.5...v1.8.6) #### What's Changed - Bump goodkey, fix breakage by [@​jonjohnsonjr](https://redirect.github.com/jonjohnsonjr) in [https://github.com/sigstore/sigstore/pull/1761](https://redirect.github.com/sigstore/sigstore/pull/1761) #### New Contributors - [@​jonjohnsonjr](https://redirect.github.com/jonjohnsonjr) made their first contribution in [https://github.com/sigstore/sigstore/pull/1761](https://redirect.github.com/sigstore/sigstore/pull/1761) **Full Changelog**: sigstore/sigstore@v1.8.5...v1.8.6 ### [`v1.8.5`](https://redirect.github.com/sigstore/sigstore/releases/tag/v1.8.5) [Compare Source](https://redirect.github.com/sigstore/sigstore/compare/v1.8.4...v1.8.5) Major are dependencies updates #### What's Changed - build(deps): Bump google.golang.org/api from 0.181.0 to 0.182.0 in /pkg/signature/kms/gcp in the all group by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/sigstore/sigstore/pull/1741](https://redirect.github.com/sigstore/sigstore/pull/1741) - build(deps): Bump github.com/sigstore/sigstore from 1.8.3 to 1.8.4 in /test/fuzz in the all group by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/sigstore/sigstore/pull/1743](https://redirect.github.com/sigstore/sigstore/pull/1743) - build(deps): Bump hashicorp/vault from 1.16.2 to 1.16.3 in /test/e2e in the all group by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/sigstore/sigstore/pull/1742](https://redirect.github.com/sigstore/sigstore/pull/1742) - build(deps): Bump github.com/aws/aws-sdk-go from 1.53.10 to 1.53.14 in /pkg/signature/kms/aws in the all group by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/sigstore/sigstore/pull/1740](https://redirect.github.com/sigstore/sigstore/pull/1740) - build(deps): Bump actions/dependency-review-action from 4.3.2 to 4.3.3 in the all group by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/sigstore/sigstore/pull/1746](https://redirect.github.com/sigstore/sigstore/pull/1746) - build(deps): Bump the all group in /pkg/signature/kms/azure with 2 updates by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/sigstore/sigstore/pull/1744](https://redirect.github.com/sigstore/sigstore/pull/1744) - build(deps): Bump the all group in /pkg/signature/kms/aws with 4 updates by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/sigstore/sigstore/pull/1745](https://redirect.github.com/sigstore/sigstore/pull/1745) - build(deps): Bump dexidp/dex from v2.39.1 to v2.40.0 in /test/e2e in the all group by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/sigstore/sigstore/pull/1748](https://redirect.github.com/sigstore/sigstore/pull/1748) - build(deps): Bump the all group in /pkg/signature/kms/gcp with 2 updates by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/sigstore/sigstore/pull/1749](https://redirect.github.com/sigstore/sigstore/pull/1749) - Update to latest letsencrypt/boulder. by [@​kommendorkapten](https://redirect.github.com/kommendorkapten) in [https://github.com/sigstore/sigstore/pull/1753](https://redirect.github.com/sigstore/sigstore/pull/1753) - build(deps): Bump actions/checkout from 4.1.6 to 4.1.7 in the all group by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/sigstore/sigstore/pull/1760](https://redirect.github.com/sigstore/sigstore/pull/1760) - build(deps): Bump the all group in /pkg/signature/kms/aws with 2 updates by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/sigstore/sigstore/pull/1759](https://redirect.github.com/sigstore/sigstore/pull/1759) - build(deps): Bump the all group in /test/e2e with 2 updates by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/sigstore/sigstore/pull/1758](https://redirect.github.com/sigstore/sigstore/pull/1758) - build(deps): Bump the all group in /pkg/signature/kms/gcp with 2 updates by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/sigstore/sigstore/pull/1756](https://redirect.github.com/sigstore/sigstore/pull/1756) - build(deps): Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.5.2 to 1.6.0 in /pkg/signature/kms/azure in the all group by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/sigstore/sigstore/pull/1755](https://redirect.github.com/sigstore/sigstore/pull/1755) - build(deps): Bump github.com/hashicorp/go-retryablehttp from 0.7.6 to 0.7.7 in /pkg/signature/kms/hashivault by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/sigstore/sigstore/pull/1766](https://redirect.github.com/sigstore/sigstore/pull/1766) - build(deps): Bump the all group in /pkg/signature/kms/aws with 4 updates by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/sigstore/sigstore/pull/1765](https://redirect.github.com/sigstore/sigstore/pull/1765) - build(deps): Bump the all group in /pkg/signature/kms/gcp with 2 updates by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/sigstore/sigstore/pull/1764](https://redirect.github.com/sigstore/sigstore/pull/1764) - build(deps): Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.6.0 to 1.7.0 in /pkg/signature/kms/azure in the all group by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/sigstore/sigstore/pull/1762](https://redirect.github.com/sigstore/sigstore/pull/1762) - build(deps): Bump the all group across 1 directory with 6 updates by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/sigstore/sigstore/pull/1763](https://redirect.github.com/sigstore/sigstore/pull/1763) **Full Changelog**: sigstore/sigstore@v1.8.4...v1.8.5 ### [`v1.8.4`](https://redirect.github.com/sigstore/sigstore/releases/tag/v1.8.4) [Compare Source](https://redirect.github.com/sigstore/sigstore/compare/v1.8.3...v1.8.4) #### What's Changed - finish move of reusable-release to sigstore/community by [@​bobcallaway](https://redirect.github.com/bobcallaway) in [https://github.com/sigstore/sigstore/pull/1699](https://redirect.github.com/sigstore/sigstore/pull/1699) - update Makefile so CodeQL covers all go files by [@​bobcallaway](https://redirect.github.com/bobcallaway) in [https://github.com/sigstore/sigstore/pull/1700](https://redirect.github.com/sigstore/sigstore/pull/1700) - bump go to 1.21 by [@​bobcallaway](https://redirect.github.com/bobcallaway) in [https://github.com/sigstore/sigstore/pull/1701](https://redirect.github.com/sigstore/sigstore/pull/1701) - pin container images to quiet scorecard alert by [@​bobcallaway](https://redirect.github.com/bobcallaway) in [https://github.com/sigstore/sigstore/pull/1709](https://redirect.github.com/sigstore/sigstore/pull/1709) - set gh action perms by [@​bobcallaway](https://redirect.github.com/bobcallaway) in [https://github.com/sigstore/sigstore/pull/1710](https://redirect.github.com/sigstore/sigstore/pull/1710) - tuf: Remove debug metadata downloads by [@​jku](https://redirect.github.com/jku) in [https://github.com/sigstore/sigstore/pull/1717](https://redirect.github.com/sigstore/sigstore/pull/1717) - Fix Hashicorp Vault KMS to use PKCS1 v1.5 by [@​berkitamas](https://redirect.github.com/berkitamas) in [https://github.com/sigstore/sigstore/pull/1736](https://redirect.github.com/sigstore/sigstore/pull/1736) #### New Contributors - [@​jku](https://redirect.github.com/jku) made their first contribution in [https://github.com/sigstore/sigstore/pull/1717](https://redirect.github.com/sigstore/sigstore/pull/1717) - [@​berkitamas](https://redirect.github.com/berkitamas) made their first contribution in [https://github.com/sigstore/sigstore/pull/1736](https://redirect.github.com/sigstore/sigstore/pull/1736) **Full Changelog**: sigstore/sigstore@v1.8.3...v1.8.4 </details> <details> <summary>spf13/cobra (github.com/spf13/cobra)</summary> ### [`v1.8.1`](https://redirect.github.com/spf13/cobra/releases/tag/v1.8.1) [Compare Source](https://redirect.github.com/spf13/cobra/compare/v1.8.0...v1.8.1) #### ✨ Features - Add env variable to suppress completion descriptions on create by [@​scop](https://redirect.github.com/scop) in [https://github.com/spf13/cobra/pull/1938](https://redirect.github.com/spf13/cobra/pull/1938) #### 🐛 Bug fixes - Micro-optimizations by [@​scop](https://redirect.github.com/scop) in [https://github.com/spf13/cobra/pull/1957](https://redirect.github.com/spf13/cobra/pull/1957) #### 🔧 Maintenance - build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.3 to 2.0.4 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/spf13/cobra/pull/2127](https://redirect.github.com/spf13/cobra/pull/2127) - Consistent annotation names by [@​nirs](https://redirect.github.com/nirs) in [https://github.com/spf13/cobra/pull/2140](https://redirect.github.com/spf13/cobra/pull/2140) - Remove fully inactivated linters by [@​nirs](https://redirect.github.com/nirs) in [https://github.com/spf13/cobra/pull/2148](https://redirect.github.com/spf13/cobra/pull/2148) - Address golangci-lint deprecation warnings, enable some more linters by [@​scop](https://redirect.github.com/scop) in [https://github.com/spf13/cobra/pull/2152](https://redirect.github.com/spf13/cobra/pull/2152) #### 🧪 Testing & CI/CD - Add test for func in cobra.go by [@​korovindenis](https://redirect.github.com/korovindenis) in [https://github.com/spf13/cobra/pull/2094](https://redirect.github.com/spf13/cobra/pull/2094) - ci: test golang 1.22 by [@​cyrilico](https://redirect.github.com/cyrilico) in [https://github.com/spf13/cobra/pull/2113](https://redirect.github.com/spf13/cobra/pull/2113) - Optimized and added more linting by [@​scop](https://redirect.github.com/scop) in [https://github.com/spf13/cobra/pull/2099](https://redirect.github.com/spf13/cobra/pull/2099) - build(deps): bump actions/setup-go from 4 to 5 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/spf13/cobra/pull/2087](https://redirect.github.com/spf13/cobra/pull/2087) - build(deps): bump actions/labeler from 4 to 5 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/spf13/cobra/pull/2086](https://redirect.github.com/spf13/cobra/pull/2086) - build(deps): bump golangci/golangci-lint-action from 3.7.0 to 4.0.0 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/spf13/cobra/pull/2108](https://redirect.github.com/spf13/cobra/pull/2108) - build(deps): bump actions/cache from 3 to 4 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/spf13/cobra/pull/2102](https://redirect.github.com/spf13/cobra/pull/2102) #### ✏️ Documentation - Fixes and docs for usage as plugin by [@​nirs](https://redirect.github.com/nirs) in [https://github.com/spf13/cobra/pull/2070](https://redirect.github.com/spf13/cobra/pull/2070) - flags: clarify documentation that LocalFlags related function do not modify the state by [@​niamster](https://redirect.github.com/niamster) in [https://github.com/spf13/cobra/pull/2064](https://redirect.github.com/spf13/cobra/pull/2064) - chore: remove repetitive words by [@​racerole](https://redirect.github.com/racerole) in [https://github.com/spf13/cobra/pull/2122](https://redirect.github.com/spf13/cobra/pull/2122) - Add LXC to the list of projects using Cobra [@​VaradBelwalkar](https://redirect.github.com/VaradBelwalkar) in [https://github.com/spf13/cobra/pull/2071](https://redirect.github.com/spf13/cobra/pull/2071) - Update projects_using_cobra.md by [@​marcuskohlberg](https://redirect.github.com/marcuskohlberg) in [https://github.com/spf13/cobra/pull/2089](https://redirect.github.com/spf13/cobra/pull/2089) - \[chore]: update projects using cobra by [@​cmwylie19](https://redirect.github.com/cmwylie19) in [https://github.com/spf13/cobra/pull/2093](https://redirect.github.com/spf13/cobra/pull/2093) - Add Taikun CLI to list of projects by [@​Smidra](https://redirect.github.com/Smidra) in [https://github.com/spf13/cobra/pull/2098](https://redirect.github.com/spf13/cobra/pull/2098) - Add Incus to the list of projects using Cobra by [@​montag451](https://redirect.github.com/montag451) in [https://github.com/spf13/cobra/pull/2118](https://redirect.github.com/spf13/cobra/pull/2118) #### New Contributors - [@​VaradBelwalkar](https://redirect.github.com/VaradBelwalkar) made their first contribution in [https://github.com/spf13/cobra/pull/2071](https://redirect.github.com/spf13/cobra/pull/2071) - [@​marcuskohlberg](https://redirect.github.com/marcuskohlberg) made their first contribution in [https://github.com/spf13/cobra/pull/2089](https://redirect.github.com/spf13/cobra/pull/2089) - [@​cmwylie19](https://redirect.github.com/cmwylie19) made their first contribution in [https://github.com/spf13/cobra/pull/2093](https://redirect.github.com/spf13/cobra/pull/2093) - [@​korovindenis](https://redirect.github.com/korovindenis) made their first contribution in [https://github.com/spf13/cobra/pull/2094](https://redirect.github.com/spf13/cobra/pull/2094) - [@​niamster](https://redirect.github.com/niamster) made their first contribution in [https://github.com/spf13/cobra/pull/2064](https://redirect.github.com/spf13/cobra/pull/2064) - [@​Smidra](https://redirect.github.com/Smidra) made their first contribution in [https://github.com/spf13/cobra/pull/2098](https://redirect.github.com/spf13/cobra/pull/2098) - [@​montag451](https://redirect.github.com/montag451) made their first contribution in [https://github.com/spf13/cobra/pull/2118](https://redirect.github.com/spf13/cobra/pull/2118) - [@​cyrilico](https://redirect.github.com/cyrilico) made their first contribution in [https://github.com/spf13/cobra/pull/2113](https://redirect.github.com/spf13/cobra/pull/2113) - [@​racerole](https://redirect.github.com/racerole) made their first contribution in [https://github.com/spf13/cobra/pull/2122](https://redirect.github.com/spf13/cobra/pull/2122) - [@​pedromotita](https://redirect.github.com/pedromotita) made their first contribution in [https://github.com/spf13/cobra/pull/2120](https://redirect.github.com/spf13/cobra/pull/2120) - [@​cubxxw](https://redirect.github.com/cubxxw) made their first contribution in [https://github.com/spf13/cobra/pull/2128](https://redirect.github.com/spf13/cobra/pull/2128) *** Thank you everyone who contributed to this release and all your hard work! Cobra and this community would never be possible without all of you!!!! 🐍 **Full Changelog**: spf13/cobra@v1.8.0...v1.8.1 </details> --- ### Configuration 📅 **Schedule**: Branch creation - "before 4am on the first day of the month" (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/slsa-framework/slsa-github-generator). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC45Ny4wIiwidXBkYXRlZEluVmVyIjoiMzguMTMzLjEiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbXX0=--> Signed-off-by: Mend Renovate <[email protected]>
- Loading branch information
1 parent
d7aa406
commit c123cc2