Skip to content

chore(deps): Bump chainguard-dev/cosign from 0.4.14 to 0.4.15 - #381

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/terraform/chainguard-dev/cosign-0.4.15
Open

chore(deps): Bump chainguard-dev/cosign from 0.4.14 to 0.4.15#381
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/terraform/chainguard-dev/cosign-0.4.15

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 17, 2026

Copy link
Copy Markdown
Contributor

Bumps chainguard-dev/cosign from 0.4.14 to 0.4.15.

Release notes

Sourced from chainguard-dev/cosign's releases.

Release v0.4.15

Changelog

  • ff5fd0dd8e720619bd9d55b949b03f882ed8d214 chore(deps): bump github.com/google/go-containerregistry from 0.21.8 to 0.21.9 (#603)
  • f419dfc32f4ddabedb5ffa80303361c0fb51ce26 chore(deps): bump github.com/prometheus/client_golang from 1.23.2 to 1.24.1 (#601)
  • 7d76e7018545a841e7687ff12a1171fe28ada431 chore(deps): bump github.com/chainguard-dev/terraform-provider-oci from 0.1.7 to 0.1.8 (#602)
  • 5a2624a3ce205b4c9af5bc411965690474717eb6 secant: add rekor rate limiter wait-duration metric (#600)
  • 82112cdbb2c110bd8473a59cec9f2c9659d7472d chore(deps): bump github.com/sigstore/sigstore from 1.10.8 to 1.10.9 (#597)
  • 76e688f6518acba22cb311db5194081e2f2c2f4e Drop deprecated sigstore/pkg/tuf import from secant (#599)
  • 24350bf12bb723ccfc33703e96e1a25ae394ce00 chore(deps): bump step-security/harden-runner from 2.20.0 to 2.20.1 (#598)
  • 634d95a0234bb955ccc030f8a4798a2afd9820cd chore(deps): bump github.com/google/go-containerregistry from 0.21.7 to 0.21.8 (#596)
  • 147fb6fc0946cb1342f215530332763513930169 chore(deps): bump github.com/hashicorp/terraform-plugin-log from 0.10.0 to 0.11.0 in the terraform group (#595)
  • f1587368acabbcde4d8bfaeac225be7fed7b6b8e chore(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 (#594)
Commits
  • ff5fd0d chore(deps): bump github.com/google/go-containerregistry from 0.21.8 to 0.21....
  • f419dfc chore(deps): bump github.com/prometheus/client_golang from 1.23.2 to 1.24.1 (...
  • 7d76e70 chore(deps): bump github.com/chainguard-dev/terraform-provider-oci from 0.1.7...
  • 5a2624a secant: add rekor rate limiter wait-duration metric (#600)
  • 82112cd chore(deps): bump github.com/sigstore/sigstore from 1.10.8 to 1.10.9 (#597)
  • 76e688f Drop deprecated sigstore/pkg/tuf import from secant (#599)
  • 24350bf chore(deps): bump step-security/harden-runner from 2.20.0 to 2.20.1 (#598)
  • 634d95a chore(deps): bump github.com/google/go-containerregistry from 0.21.7 to 0.21....
  • 147fb6f chore(deps): bump github.com/hashicorp/terraform-plugin-log from 0.10.0 to 0....
  • f158736 chore(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 (#594)
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [chainguard-dev/cosign](https://github.com/chainguard-dev/terraform-provider-cosign) from 0.4.14 to 0.4.15.
- [Release notes](https://github.com/chainguard-dev/terraform-provider-cosign/releases)
- [Commits](chainguard-dev/terraform-provider-cosign@v0.4.14...v0.4.15)

---
updated-dependencies:
- dependency-name: chainguard-dev/cosign
  dependency-version: 0.4.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file terraform Pull requests that update Terraform code labels Aug 17, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file terraform Pull requests that update Terraform code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants