Skip to content

build(deps): bump sigstore to 1.10.10 - #47

Merged
frathe merged 2 commits into
mainfrom
dependabot/go_modules/go-dependencies-15af201c63
Sep 22, 2026
Merged

frathe merged 2 commits into
mainfrom
dependabot/go_modules/go-dependencies-15af201c63

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 19, 2026

Copy link
Copy Markdown
Contributor

Updates github.com/sigstore/sigstore from 1.10.9 to 1.10.10 while retaining fyne.io/fyne/v2 at 2.8.0. Refreshes the reviewed updater dependency manifest and generated third-party notices for the Sigstore transitive changes.

Sigstore release: https://github.com/sigstore/sigstore/releases/tag/v1.10.10

Validation:

  • go mod tidy -diff
  • go test -tags no_emoji,nodynamic ./scripts/updaternotices ./internal/update
  • make verify-build

Bumps the go-dependencies group with 2 updates: [fyne.io/fyne/v2](https://github.com/fyne-io/fyne) and [github.com/sigstore/sigstore](https://github.com/sigstore/sigstore).


Updates `fyne.io/fyne/v2` from 2.8.0 to 2.8.1
- [Release notes](https://github.com/fyne-io/fyne/releases)
- [Changelog](https://github.com/fyne-io/fyne/blob/develop/CHANGELOG.md)
- [Commits](fyne-io/fyne@v2.8.0...v2.8.1)

Updates `github.com/sigstore/sigstore` from 1.10.9 to 1.10.10
- [Release notes](https://github.com/sigstore/sigstore/releases)
- [Commits](sigstore/sigstore@v1.10.9...v1.10.10)

---
updated-dependencies:
- dependency-name: fyne.io/fyne/v2
  dependency-version: 2.8.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/sigstore/sigstore
  dependency-version: 1.10.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Sep 19, 2026
@github-actions

Copy link
Copy Markdown

Qodana for Go

It seems all right 👌

No new problems were found according to the checks applied

💡 Qodana analysis was run in the pull request mode: only the changed files were checked
☁️ View the detailed Qodana report

Contact Qodana team

Contact us at qodana-support@jetbrains.com

@frathe frathe changed the title build(deps): bump the go-dependencies group with 2 updates build(deps): bump sigstore to 1.10.10 Sep 22, 2026
@github-actions

Copy link
Copy Markdown

Qodana for Go

It seems all right 👌

No new problems were found according to the checks applied

💡 Qodana analysis was run in the pull request mode: only the changed files were checked
☁️ View the detailed Qodana report

Contact Qodana team

Contact us at qodana-support@jetbrains.com

@frathe
frathe merged commit f9b9565 into main Sep 22, 2026
13 checks passed
@frathe
frathe deleted the dependabot/go_modules/go-dependencies-15af201c63 branch September 22, 2026 12:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant