Skip to content

Update sigstore/gh-action-sigstore-python action to v3.1.0#5026

Merged
renovate[bot] merged 2 commits intomasterfrom
renovate/sigstore-gh-action-sigstore-python-3.x
Oct 25, 2025
Merged

Update sigstore/gh-action-sigstore-python action to v3.1.0#5026
renovate[bot] merged 2 commits intomasterfrom
renovate/sigstore-gh-action-sigstore-python-3.x

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Oct 25, 2025

This PR contains the following updates:

Package Type Update Change
sigstore/gh-action-sigstore-python action minor v3.0.1 -> v3.1.0

Release Notes

sigstore/gh-action-sigstore-python (sigstore/gh-action-sigstore-python)

v3.1.0

Compare Source

gh-action-sigstore-python is now compatible with Rekor v2
transparency log (but produced signature bundles still contain Rekor v1 entries by default).

Changed
  • The action now uses sigstore-python 4.1. All other dependencies are also updated
    (#​220)
Fixed
  • Fixed incompatibility with Python 3.14 by upgrading dependencies
    (#​225)
Added
  • rekor-version argument was added to control the Rekor transparency log
    version when signing. The default version in the gh-action-sigstore-python
    3.x series will remain 1 (except when using staging: true).
    (#​228)

Configuration

📅 Schedule: Branch creation - Only on Sunday and Saturday ( * * * * 0,6 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the ⚙️ ci-cd affected functionality: ci-cd label Oct 25, 2025
@renovate renovate bot enabled auto-merge (squash) October 25, 2025 02:46
@renovate renovate bot merged commit f15833c into master Oct 25, 2025
9 checks passed
@renovate renovate bot deleted the renovate/sigstore-gh-action-sigstore-python-3.x branch October 25, 2025 02:57
@github-actions github-actions bot locked and limited conversation to collaborators Nov 1, 2025
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

⚙️ ci-cd affected functionality: ci-cd

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants