Skip to content

build(deps): bump sigstore to 1.10.10 #47

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
frathe merged 2 commits into from
Sep 22, 2026
Merged

build(deps): bump sigstore to 1.10.10 #47

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
0bb4462
build(deps): bump the go-dependencies group with 2 updates
dependabot[bot] Sep 19, 2026
a38d38f
build(deps): keep Fyne at 2.8.0
frathe Sep 22, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
16 changes: 8 additions & 8 deletions THIRD-PARTY-NOTICES.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3077,11 +3077,11 @@ The Go-derived source headers below also use the complete [Go BSD license](#upda
- `x509/root_darwin_armx.go (lines 3-5)`: [license text 1c830a763cea](#updater-text-1c830a763cea)
Applies to: `x509/root_darwin_armx.go`, `x509/root_linux.go`.

### github.com/google/go-containerregistry v0.21.7
### github.com/google/go-containerregistry v0.22.1

License: Apache-2.0

Source: https://proxy.golang.org/github.com/google/go-containerregistry/@v/v0.21.7.zip
Source: https://proxy.golang.org/github.com/google/go-containerregistry/@v/v0.22.1.zip

- `LICENSE`: [license text 58d1e17ffe51](#updater-text-58d1e17ffe51)

Expand Down Expand Up @@ -3148,11 +3148,11 @@ Source: https://proxy.golang.org/github.com/pkg/errors/@v/v0.9.1.zip

- `LICENSE`: [license text 8d427fd87bc9](#updater-text-8d427fd87bc9)

### github.com/secure-systems-lab/go-securesystemslib v0.11.0
### github.com/secure-systems-lab/go-securesystemslib v0.11.1

License: MIT

Source: https://proxy.golang.org/github.com/secure-systems-lab/go-securesystemslib/@v/v0.11.0.zip
Source: https://proxy.golang.org/github.com/secure-systems-lab/go-securesystemslib/@v/v0.11.1.zip

- `LICENSE`: [license text cb64503e4772](#updater-text-cb64503e4772)

Expand All @@ -3170,11 +3170,11 @@ The matcher in `gitignore.go` closely matches Python pathspec 0.2.2 at revision
- `scripts/updaternotices/licenses/cpython-LICENSE`: [license text be4ab0448730](#updater-text-be4ab0448730)
Original source: https://github.com/python/cpython/blob/v2.7.6/LICENSE

### github.com/sigstore/protobuf-specs v0.5.1
### github.com/sigstore/protobuf-specs v0.5.2

License: Apache-2.0

Source: https://proxy.golang.org/github.com/sigstore/protobuf-specs/@v/v0.5.1.zip
Source: https://proxy.golang.org/github.com/sigstore/protobuf-specs/@v/v0.5.2.zip

- `COPYRIGHT.txt`: [license text 193753bc913f](#updater-text-193753bc913f)
- `LICENSE`: [license text cfc7749b96f6](#updater-text-cfc7749b96f6)
Expand All @@ -3197,11 +3197,11 @@ Source: https://proxy.golang.org/github.com/sigstore/rekor-tiles/v2/@v/v2.3.0.zi
- `COPYRIGHT.txt`: [license text 9daa76e002ba](#updater-text-9daa76e002ba)
- `LICENSE`: [license text c71d239df917](#updater-text-c71d239df917)

### github.com/sigstore/sigstore v1.10.9
### github.com/sigstore/sigstore v1.10.10

License: Apache-2.0

Source: https://proxy.golang.org/github.com/sigstore/sigstore/@v/v1.10.9.zip
Source: https://proxy.golang.org/github.com/sigstore/sigstore/@v/v1.10.10.zip

- `COPYRIGHT.txt`: [license text 6622d1d495e7](#updater-text-6622d1d495e7)
- `LICENSE`: [license text cfc7749b96f6](#updater-text-cfc7749b96f6)
Expand Down
8 changes: 4 additions & 4 deletions go.mod
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -10,7 +10,7 @@ require (
github.com/fyne-io/oksvg v0.2.0
github.com/gen2brain/avif v0.6.0
github.com/nozzle/umap v0.0.0-20260130174432-f6085fb2514d
github.com/sigstore/sigstore v1.10.9
github.com/sigstore/sigstore v1.10.10
github.com/sigstore/sigstore-go v1.3.0
github.com/srwiley/rasterx v0.0.0-20220730225603-2ab79fcdd4ef
github.com/stretchr/testify v1.12.1
Expand Down Expand Up @@ -71,7 +71,7 @@ require (
github.com/go-viper/mapstructure/v2 v2.5.0 // indirect
github.com/godbus/dbus/v5 v5.2.2 // indirect
github.com/google/certificate-transparency-go v1.3.3 // indirect
github.com/google/go-containerregistry v0.21.7 // indirect
github.com/google/go-containerregistry v0.22.1 // indirect
github.com/google/uuid v1.6.0 // indirect
github.com/grpc-ecosystem/grpc-gateway/v2 v2.29.0 // indirect
github.com/hack-pad/go-indexeddb v0.3.2 // indirect
Expand All @@ -87,9 +87,9 @@ require (
github.com/opencontainers/go-digest v1.0.0 // indirect
github.com/pkg/errors v0.9.1 // indirect
github.com/rymdport/portal v0.4.2 // indirect
github.com/secure-systems-lab/go-securesystemslib v0.11.0 // indirect
github.com/secure-systems-lab/go-securesystemslib v0.11.1 // indirect
github.com/shibumi/go-pathspec v1.3.0 // indirect
github.com/sigstore/protobuf-specs v0.5.1 // indirect
github.com/sigstore/protobuf-specs v0.5.2 // indirect
github.com/sigstore/rekor v1.5.4 // indirect
github.com/sigstore/rekor-tiles/v2 v2.3.0 // indirect
github.com/sigstore/timestamp-authority/v2 v2.1.3 // indirect
Expand Down
24 changes: 12 additions & 12 deletions go.sum
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -127,8 +127,8 @@ github.com/go-gl/gl v0.0.0-20260331235117-4566fea9a276 h1:IO5P06Pcj9K04d+l4nrf3c
github.com/go-gl/gl v0.0.0-20260331235117-4566fea9a276/go.mod h1:9YTyiznxEY1fVinfM7RvRcjRHbw2xLBJ3AAGIT0I4Nw=
github.com/go-gl/glfw/v3.4/glfw v0.1.0-pre.1.0.20260707082822-2a407d02d01a h1:HWK0MBggT/T6YH7VffE10xBIhqeTq8JzIUPJXrRy87g=
github.com/go-gl/glfw/v3.4/glfw v0.1.0-pre.1.0.20260707082822-2a407d02d01a/go.mod h1:T5Dn0JwIJOX1euPZ/iT4tq6nFYtmukjcYa7937HuYK8=
github.com/go-jose/go-jose/v4 v4.1.4 h1:moDMcTHmvE6Groj34emNPLs/qtYXRVcd6S7NHbHz3kA=
github.com/go-jose/go-jose/v4 v4.1.4/go.mod h1:x4oUasVrzR7071A4TnHLGSPpNOm2a21K9Kf04k1rs08=
github.com/go-jose/go-jose/v4 v4.1.5 h1:RjgjO2LOtWOJKUC5wpwY9LR3B3vwVAz6JS2YHfYU6eA=
github.com/go-jose/go-jose/v4 v4.1.5/go.mod h1:x4oUasVrzR7071A4TnHLGSPpNOm2a21K9Kf04k1rs08=
github.com/go-logr/logr v1.2.2/go.mod h1:jdQByPbusPIv2/zmleS9BjJVeZ6kBagPoEUsqbVz/1A=
github.com/go-logr/logr v1.4.4 h1:tG4xh9yMsRCAiodLVTxyrkzSZ9+o0L1Kg/+cPVcbP/8=
github.com/go-logr/logr v1.4.4/go.mod h1:9T104GzyrTigFIr8wt5mBrctHMim0Nb2HLGrmQ40KvY=
Expand Down Expand Up @@ -201,8 +201,8 @@ github.com/google/go-cmdtest v0.4.1-0.20220921163831-55ab3332a786 h1:rcv+Ippz6RA
github.com/google/go-cmdtest v0.4.1-0.20220921163831-55ab3332a786/go.mod h1:apVn/GCasLZUVpAJ6oWAuyP7Ne7CEsQbTnc0plM3m+o=
github.com/google/go-cmp v0.7.0 h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8=
github.com/google/go-cmp v0.7.0/go.mod h1:pXiqmnSA92OHEEa9HXL2W4E7lf9JzCmGVUdgjX3N/iU=
github.com/google/go-containerregistry v0.21.7 h1:/vPFuVXDjtFREsVArW+0h1CIl5urnOhzei4X2DMW9IU=
github.com/google/go-containerregistry v0.21.7/go.mod h1:kjSbt7/zMsKLWfnHrIvKvhXHUw91jbe9DNjPPJ32gXE=
github.com/google/go-containerregistry v0.22.1 h1:RZuuSYhTvlDvtsK+NkutoCZ//C0X2ebLK8X8l3ULs84=
github.com/google/go-containerregistry v0.22.1/go.mod h1:bJR35SK8XgisYmhg/FMQ/5RK0S/XrOAqLBV5/LR2XE0=
github.com/google/pprof v0.0.0-20260402051712-545e8a4df936 h1:EwtI+Al+DeppwYX2oXJCETMO23COyaKGP6fHVpkpWpg=
github.com/google/pprof v0.0.0-20260402051712-545e8a4df936/go.mod h1:MxpfABSjhmINe3F1It9d+8exIHFvUqtLIRCdOGNXqiI=
github.com/google/renameio v0.1.0 h1:GOZbcHa3HfsPKPlmyPyN2KEohoMXOhdMbHrvbpl2QaA=
Expand Down Expand Up @@ -296,20 +296,20 @@ github.com/rymdport/portal v0.4.2/go.mod h1:kFF4jslnJ8pD5uCi17brj/ODlfIidOxlgUDT
github.com/sassoftware/relic v7.2.1+incompatible h1:Pwyh1F3I0r4clFJXkSI8bOyJINGqpgjJU3DYAZeI05A=
github.com/sassoftware/relic/v8 v8.2.0 h1:9/L4S4I6an/JsPNhmcTpqfiOIsLb/iJaePZD1xR+ulE=
github.com/sassoftware/relic/v8 v8.2.0/go.mod h1:pZy7hLT9WCOKPonV8G/fplvtBLOZd6/kWtKqeHR6nKc=
github.com/secure-systems-lab/go-securesystemslib v0.11.0 h1:iuCR9kcMFD4QurdKrGvPLoKZLv9YvwPYVr0473BdtFs=
github.com/secure-systems-lab/go-securesystemslib v0.11.0/go.mod h1:+PMOTjUGwHj2vcZ+TFKlb1tXRbrdWE1LYDT5i9JC80Q=
github.com/secure-systems-lab/go-securesystemslib v0.11.1 h1:ayahDPjfSIqKegyt5YVGEvQ7SAi72GHXTy+b2YjUd5w=
github.com/secure-systems-lab/go-securesystemslib v0.11.1/go.mod h1:UyOjhoZLi76ir63u1ptubEevVe6dlNPmNxwgVvKqFFY=
github.com/sergi/go-diff v1.4.0 h1:n/SP9D5ad1fORl+llWyN+D6qoUETXNZARKjyY2/KVCw=
github.com/sergi/go-diff v1.4.0/go.mod h1:A0bzQcvG0E7Rwjx0REVgAGH58e96+X0MeOfepqsbeW4=
github.com/shibumi/go-pathspec v1.3.0 h1:QUyMZhFo0Md5B8zV8x2tesohbb5kfbpTi9rBnKh5dkI=
github.com/shibumi/go-pathspec v1.3.0/go.mod h1:Xutfslp817l2I1cZvgcfeMQJG5QnU2lh5tVaaMCl3jE=
github.com/sigstore/protobuf-specs v0.5.1 h1:/5OPaNuolRJmQfeZLayJGFXMpsRJEdgC6ah1/+7Px7U=
github.com/sigstore/protobuf-specs v0.5.1/go.mod h1:DRBzpFuE+LnvQMN10/dU6nBeKwVLGEQ6o2FovN2Rats=
github.com/sigstore/protobuf-specs v0.5.2 h1:RSWWUY8QrVTxbYH00jY/jg2e7YnjzrpwP+PeHTMll0E=
github.com/sigstore/protobuf-specs v0.5.2/go.mod h1:DRBzpFuE+LnvQMN10/dU6nBeKwVLGEQ6o2FovN2Rats=
github.com/sigstore/rekor v1.5.4 h1:A9zITTrkRwO+8lfq7L/gBR7rDHHcBQJRI+a0JQo4xDM=
github.com/sigstore/rekor v1.5.4/go.mod h1:0bcUHhZPlG+RVW1dI/7sdBp0MiVWVzk9h0tgOH/o0Yc=
github.com/sigstore/rekor-tiles/v2 v2.3.0 h1:HhMgH61UP0t899V8Fjt7pz1YdgOBptbaQdnCF+79cdc=
github.com/sigstore/rekor-tiles/v2 v2.3.0/go.mod h1:DEFiKSyQ4nF75QRVNdOPaIH3cmvMkO2B6xDZjNYngPc=
github.com/sigstore/sigstore v1.10.9 h1:7Dcpt+ibnltHQZ8XhaU0dFmhHaf/T491eJfA9WDex4Y=
github.com/sigstore/sigstore v1.10.9/go.mod h1:LYW9+qH7bK8wZmLm6lPxIC5lkHtkJDCgkqjChzTAIBs=
github.com/sigstore/sigstore v1.10.10 h1:0hfpqcl1+UnzxuVT4//PzL3LQ8uOCzoF90Ofs5zzBwM=
github.com/sigstore/sigstore v1.10.10/go.mod h1:Q8tpy2X80KVswawYR0eTjWl3gM3AU+ak+h/NtPzRfWs=
github.com/sigstore/sigstore-go v1.3.0 h1:hnIMHREyCNTYFtOE1o7ae3Axa9B5W5EjUSBJICP2NBE=
github.com/sigstore/sigstore-go v1.3.0/go.mod h1:AyRQXfpH89py1twjE3kEZxlRersng90GSYqQV9zGJE8=
github.com/sigstore/sigstore/pkg/signature/kms/aws v1.10.9 h1:2NWAU/utJRwzy1OrQurlY3wlDSynyH1rNJS5GgFchrg=
Expand Down Expand Up @@ -344,8 +344,8 @@ github.com/tink-crypto/tink-go-gcpkms/v2 v2.4.0 h1:xpI5pnEQ0erFCS3JmcEl7Blluo8Zi
github.com/tink-crypto/tink-go-gcpkms/v2 v2.4.0/go.mod h1:wDDAhjfd1t4TjeJCSsmFK7CARPUs/ITi16ZZ8kmAaFQ=
github.com/tink-crypto/tink-go-hcvault/v2 v2.5.0 h1:eXuNqgrcYelxU1MVikOJDP3wTS5lvihM4ntoAbAMfvs=
github.com/tink-crypto/tink-go-hcvault/v2 v2.5.0/go.mod h1:3RhcxAqek6xUlRFmJifvU4CYLZN60KMQdIKqpZAZJG0=
github.com/tink-crypto/tink-go/v2 v2.7.0 h1:k7QnUXJ1cRDpvoy/5l1FimZqMAArRff8vjUqzi5N04o=
github.com/tink-crypto/tink-go/v2 v2.7.0/go.mod h1:cWNpQ/yAT/QHzAV0kBGMOSJzzYTKofDZdJaUqOPPWCI=
github.com/tink-crypto/tink-go/v2 v2.8.0 h1:1zODq1bZDqOQdNPjhvwGYLDw9On7mDWPnQf+4xXlpAc=
github.com/tink-crypto/tink-go/v2 v2.8.0/go.mod h1:aNXZeyxjQU9iqAeARRNmbESXUW6Mao1HRCCTY8B1TFM=
github.com/transparency-dev/formats v0.1.1 h1:4bVHJc+KdBgpA1OJD1yjI+g0i5Z1graCppTMH8lWKJI=
github.com/transparency-dev/formats v0.1.1/go.mod h1:qtZ8goRuJ8FTBG9c9+Bj0rn2rUG7eG/AUTkr+Aw3jFw=
github.com/transparency-dev/merkle v0.0.2 h1:Q9nBoQcZcgPamMkGn7ghV8XiTZ/kRxn1yCG81+twTK4=
Expand Down
16 changes: 8 additions & 8 deletions scripts/updaternotices/manifest.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -574,15 +574,15 @@
},
{
"module": "github.com/google/go-containerregistry",
"version": "v0.21.7",
"version": "v0.22.1",
"files": [
{
"path": "LICENSE",
"sha256": "58d1e17ffe5109a7ae296caafcadfdbe6a7d176f0bc4ab01e12a689b0499d8bd"
}
],
"license": "Apache-2.0",
"source": "https://proxy.golang.org/github.com/google/go-containerregistry/@v/v0.21.7.zip",
"source": "https://proxy.golang.org/github.com/google/go-containerregistry/@v/v0.22.1.zip",
"packages": [
"github.com/google/go-containerregistry/pkg/name"
]
Expand Down Expand Up @@ -721,15 +721,15 @@
},
{
"module": "github.com/secure-systems-lab/go-securesystemslib",
"version": "v0.11.0",
"version": "v0.11.1",
"files": [
{
"path": "LICENSE",
"sha256": "cb64503e4772676abf9c5f67398c14426f7b1346a4d7aa851ad64ff49fbf41e4"
}
],
"license": "MIT",
"source": "https://proxy.golang.org/github.com/secure-systems-lab/go-securesystemslib/@v/v0.11.0.zip",
"source": "https://proxy.golang.org/github.com/secure-systems-lab/go-securesystemslib/@v/v0.11.1.zip",
"packages": [
"github.com/secure-systems-lab/go-securesystemslib/cjson",
"github.com/secure-systems-lab/go-securesystemslib/dsse",
Expand Down Expand Up @@ -767,7 +767,7 @@
},
{
"module": "github.com/sigstore/protobuf-specs",
"version": "v0.5.1",
"version": "v0.5.2",
"files": [
{
"path": "COPYRIGHT.txt",
Expand All @@ -779,7 +779,7 @@
}
],
"license": "Apache-2.0",
"source": "https://proxy.golang.org/github.com/sigstore/protobuf-specs/@v/v0.5.1.zip",
"source": "https://proxy.golang.org/github.com/sigstore/protobuf-specs/@v/v0.5.2.zip",
"packages": [
"github.com/sigstore/protobuf-specs/gen/pb-go/bundle/v1",
"github.com/sigstore/protobuf-specs/gen/pb-go/common/v1",
Expand Down Expand Up @@ -856,7 +856,7 @@
},
{
"module": "github.com/sigstore/sigstore",
"version": "v1.10.9",
"version": "v1.10.10",
"files": [
{
"path": "COPYRIGHT.txt",
Expand All @@ -868,7 +868,7 @@
}
],
"license": "Apache-2.0",
"source": "https://proxy.golang.org/github.com/sigstore/sigstore/@v/v1.10.9.zip",
"source": "https://proxy.golang.org/github.com/sigstore/sigstore/@v/v1.10.10.zip",
"packages": [
"github.com/sigstore/sigstore/pkg/cryptoutils",
"github.com/sigstore/sigstore/pkg/signature",
Expand Down
Loading