Skip to content

chore(deps): bump github.com/sigstore/sigstore from 1.10.9 to 1.11.0 - #23153

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/github.com/sigstore/sigstore-1.11.0
Closed

chore(deps): bump github.com/sigstore/sigstore from 1.10.9 to 1.11.0#23153
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/github.com/sigstore/sigstore-1.11.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 30, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps github.com/sigstore/sigstore from 1.10.9 to 1.11.0.

Release notes

Sourced from github.com/sigstore/sigstore's releases.

v1.11.0

What's Changed

v1.11.0 and v1.10.10 are identical releases tagged for the same commit. Since the minimum Go version has been bumped to 1.27.0, we are releasing this change as a minor version bump. Dependencies that do not want to update to 1.27 yet can use v1.10.11, and we'll backport any security fixes to v1.10.x for the next 6 months while Go 1.26 is still supported.

Full Changelog: sigstore/sigstore@v1.10.9...v1.11.0

v1.10.11 rolls back the release to a previous commit where the minimum Go version is 1.25.0. An upcoming v1.11.0 will require 1.27.0.

v1.10.10

What's Changed

New Contributors

Full Changelog: sigstore/sigstore@v1.10.9...v1.10.10

Commits
  • 4f4c3f8 Add release instructions (#2418)
  • 49e21e5 build(deps): Bump github.com/google/go-containerregistry from 0.21.9 to 0.22....
  • eda3b60 build(deps): Bump the gomod group across 4 directories with 4 updates (#2413)
  • b3e2728 Adjust mldsa error handling (#2417)
  • bfbf63e Support for ML-DSA keys (#2416)
  • 538e3fa Bump go to 1.27 and fix linter and api issues (#2415)
  • e8841f5 build(deps): Bump hashicorp/vault in /test/e2e in the all group (#2412)
  • 5b3d739 Fix Azure KMS ECDSA signature verification (r||s ordering + padding) (#2410)
  • ba4de68 build(deps): Bump github.com/aws/aws-sdk-go-v2/config (#2406)
  • 1abcedd build(deps): Bump github.com/Azure/azure-sdk-for-go/sdk/azcore (#2407)
  • Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
github.com/sigstore/sigstore [< 1.7, > 1.6.4]

@dependabot dependabot Bot added auto-merge Auto-merge minor and patch version bumps auto-retest PRs with this label will be automatically retested if prow checks fails ci-all-qa-tests Tells CI to run all API tests (not just BAT). dependencies Pull requests that update a dependency file labels Sep 30, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner September 30, 2026 05:53
@dependabot dependabot Bot added ci-all-qa-tests Tells CI to run all API tests (not just BAT). auto-merge Auto-merge minor and patch version bumps auto-retest PRs with this label will be automatically retested if prow checks fails labels Sep 30, 2026
@dependabot
chore(deps): bump github.com/sigstore/sigstore from 1.10.9 to 1.11.0
7b40740 
Bumps [github.com/sigstore/sigstore](https://github.com/sigstore/sigstore) from 1.10.9 to 1.11.0.
- [Release notes](https://github.com/sigstore/sigstore/releases)
- [Commits](sigstore/sigstore@v1.10.9...v1.11.0)

---
updated-dependencies:
- dependency-name: github.com/sigstore/sigstore
  dependency-version: 1.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/github.com/sigstore/sigstore-1.11.0 branch from 71a4756 to 7b40740 Compare October 2, 2026 09:24
@github-actions

github-actions Bot commented Oct 2, 2026

Copy link
Copy Markdown
Contributor

🚀 Build Images Ready

Images are ready for commit 7b40740. To use with deploy scripts:

export MAIN_IMAGE_TAG=5.1.x-151-g7b40740266

@github-actions

github-actions Bot commented Oct 2, 2026

Copy link
Copy Markdown
Contributor

/konflux-retest checks

1 similar comment
@github-actions

github-actions Bot commented Oct 2, 2026

Copy link
Copy Markdown
Contributor

/konflux-retest checks

@rhacs-bot

rhacs-bot commented Oct 2, 2026

Copy link
Copy Markdown
Contributor

/retest

@github-actions

github-actions Bot commented Oct 2, 2026

Copy link
Copy Markdown
Contributor

/konflux-retest checks

@openshift-ci

openshift-ci Bot commented Oct 2, 2026

Copy link
Copy Markdown

@dependabot[bot]: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/gke-nongroovy-e2e-tests 7b40740 link true /test gke-nongroovy-e2e-tests
ci/prow/ocp-4-12-nongroovy-e2e-tests 7b40740 link false /test ocp-4-12-nongroovy-e2e-tests
ci/prow/ocp-4-22-nongroovy-e2e-tests 7b40740 link false /test ocp-4-22-nongroovy-e2e-tests
ci/prow/gke-qa-e2e-tests 7b40740 link false /test gke-qa-e2e-tests

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

@rhybrillou

rhybrillou commented Oct 20, 2026

Copy link
Copy Markdown
Contributor

Superseded by #23492

@rhybrillou rhybrillou closed this Oct 20, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 20, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@rhybrillou
rhybrillou deleted the dependabot/go_modules/github.com/sigstore/sigstore-1.11.0 branch October 20, 2026 09:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

auto-merge Auto-merge minor and patch version bumps auto-retest PRs with this label will be automatically retested if prow checks fails ci-all-qa-tests Tells CI to run all API tests (not just BAT). dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@rhacs-bot @rhybrillou