Skip to content

fix(deps): update module github.com/sigstore/sigstore to v1.10.9 (main) - #1102

Open
crossplane-renovate[bot] wants to merge 1 commit into
mainfrom
renovate/main-github.com-sigstore-sigstore-1.x
Open

fix(deps): update module github.com/sigstore/sigstore to v1.10.9 (main)#1102
crossplane-renovate[bot] wants to merge 1 commit into
mainfrom
renovate/main-github.com-sigstore-sigstore-1.x

Conversation

@crossplane-renovate

@crossplane-renovate crossplane-renovate Bot commented Aug 4, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
github.com/sigstore/sigstore v1.10.8v1.10.9 age confidence

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

sigstore/sigstore (github.com/sigstore/sigstore)

v1.10.9

Compare Source

What's Changed

Note: #​2369 deprecates the TUF client. Use the TUF client from sigstore-go instead: https://github.com/sigstore/sigstore-go/tree/main/pkg/tuf

  • Deprecate TUF client, ValidatePubKey in #​2369
  • docs: add OVHcloud KMS in available external plugins in #​2359
  • fix(oauthflow): default the device flow poll interval to 5s per RFC 8628 in #​2381
  • Add BrowserOpener field to InteractiveIDTokenGetter in #​2383
  • Fix Azure KMS support for RSA signatures in #​2355

Full Changelog: sigstore/sigstore@v1.10.8...v1.10.9


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

@crossplane-renovate
crossplane-renovate Bot force-pushed the renovate/main-github.com-sigstore-sigstore-1.x branch from 5afc582 to ff376f5 Compare August 14, 2026 08:31
@crossplane-renovate

Copy link
Copy Markdown
Contributor Author

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 4 additional dependencies were updated

Details:

Package Change
github.com/coreos/go-oidc/v3 v3.17.0 -> v3.20.0
github.com/golang/snappy v0.0.4 -> v1.0.0
google.golang.org/genproto/googleapis/api v0.0.0-20260526163538-3dc84a4a5aaa -> v0.0.0-20260727163830-6c54dddc4772
google.golang.org/genproto/googleapis/rpc v0.0.0-20260523011958-0a33c5d7ca68 -> v0.0.0-20260720155508-bb71a54f79dc

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants