Skip to content

Conversation

@renovate
Copy link

@renovate renovate bot commented Oct 21, 2025

This PR contains the following updates:

Package Type Update Change
sigstore/gh-action-sigstore-python action minor v3.0.1 -> v3.2.0

Release Notes

sigstore/gh-action-sigstore-python (sigstore/gh-action-sigstore-python)

v3.2.0

Compare Source

gh-action-sigstore-python action now manages the used Python version internally, improving reliability.

Changed
  • Manage Python version internally (#​242, #​258)
  • Dependency updates

v3.1.0

Compare Source

gh-action-sigstore-python is now compatible with Rekor v2
transparency log (but produced signature bundles still contain Rekor v1 entries by default).

Changed
  • The action now uses sigstore-python 4.1. All other dependencies are also updated
    (#​220)
Fixed
  • Fixed incompatibility with Python 3.14 by upgrading dependencies
    (#​225)
Added
  • rekor-version argument was added to control the Rekor transparency log
    version when signing. The default version in the gh-action-sigstore-python
    3.x series will remain 1 (except when using staging: true).
    (#​228)

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot changed the title chore(deps): update sigstore/gh-action-sigstore-python action to v3.1.0 chore(deps): update sigstore/gh-action-sigstore-python action to v3.2.0 Dec 3, 2025
@renovate renovate bot force-pushed the renovate/sigstore-gh-action-sigstore-python-3.x branch from 0fdfc70 to e973191 Compare December 3, 2025 12:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant