Skip to content

Update module github.com/sigstore/sigstore to v1.10.9 - #1051

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/github.com-sigstore-sigstore-1.x
Open

Update module github.com/sigstore/sigstore to v1.10.9#1051
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/github.com-sigstore-sigstore-1.x

Conversation

@renovate

@renovate renovate Bot commented Aug 3, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
github.com/sigstore/sigstore v1.10.8v1.10.9 age confidence

Release Notes

sigstore/sigstore (github.com/sigstore/sigstore)

v1.10.9

Compare Source

What's Changed

Note: #​2369 deprecates the TUF client. Use the TUF client from sigstore-go instead: https://github.com/sigstore/sigstore-go/tree/main/pkg/tuf

  • Deprecate TUF client, ValidatePubKey in #​2369
  • docs: add OVHcloud KMS in available external plugins in #​2359
  • fix(oauthflow): default the device flow poll interval to 5s per RFC 8628 in #​2381
  • Add BrowserOpener field to InteractiveIDTokenGetter in #​2383
  • Fix Azure KMS support for RSA signatures in #​2355

Full Changelog: sigstore/sigstore@v1.10.8...v1.10.9


Configuration

📅 Schedule: (in timezone UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the dependencies label Aug 3, 2026
@renovate

renovate Bot commented Aug 3, 2026

Copy link
Copy Markdown
Contributor Author

ℹ️ Artifact update notice

File name: image/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 4 additional dependencies were updated

Details:

Package Change
github.com/coreos/go-oidc/v3 v3.18.0 -> v3.20.0
github.com/google/go-containerregistry v0.21.6 -> v0.21.7
google.golang.org/genproto/googleapis/api v0.0.0-20260526163538-3dc84a4a5aaa -> v0.0.0-20260727163830-6c54dddc4772
google.golang.org/genproto/googleapis/rpc v0.0.0-20260526163538-3dc84a4a5aaa -> v0.0.0-20260720155508-bb71a54f79dc

@github-actions github-actions Bot added the image Related to "image" package label Aug 3, 2026
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
renovate Bot force-pushed the renovate/github.com-sigstore-sigstore-1.x branch from 6f85032 to 03a513e Compare August 4, 2026 16:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies image Related to "image" package

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants