Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: sigstore/sigstore-go
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v1.2.1
Choose a base ref
...
head repository: sigstore/sigstore-go
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v1.2.2
Choose a head ref
  • 9 commits
  • 22 files changed
  • 5 contributors

Commits on Jun 15, 2026

  1. Update cert identity verify functions to ensure some criteria is spec…

    …ified (#645)
    
    Signed-off-by: Zach Steindler <steiza@github.com>
    Co-authored-by: Zach Steindler <steiza@github.com>
    kanywst and steiza authored Jun 15, 2026
    Configuration menu
    Copy the full SHA
    a2a84a6 View commit details
    Browse the repository at this point in the history

Commits on Jun 30, 2026

  1. Update workflows to use Actions network firewall (#646)

    Signed-off-by: Zach Steindler <steiza@github.com>
    steiza authored Jun 30, 2026
    Configuration menu
    Copy the full SHA
    c95d7f4 View commit details
    Browse the repository at this point in the history
  2. Bump actions/checkout from 6.0.3 to 7.0.0 (#648)

    Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.3 to 7.0.0.
    - [Release notes](https://github.com/actions/checkout/releases)
    - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
    - [Commits](actions/checkout@df4cb1c...9c091bb)
    
    ---
    updated-dependencies:
    - dependency-name: actions/checkout
      dependency-version: 7.0.0
      dependency-type: direct:production
      update-type: version-update:semver-major
    ...
    
    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Jun 30, 2026
    Configuration menu
    Copy the full SHA
    13a15e1 View commit details
    Browse the repository at this point in the history
  3. Bump actions/setup-go from 6.4.0 to 6.5.0 (#650)

    Bumps [actions/setup-go](https://github.com/actions/setup-go) from 6.4.0 to 6.5.0.
    - [Release notes](https://github.com/actions/setup-go/releases)
    - [Commits](actions/setup-go@4a36011...924ae3a)
    
    ---
    updated-dependencies:
    - dependency-name: actions/setup-go
      dependency-version: 6.5.0
      dependency-type: direct:production
      update-type: version-update:semver-minor
    ...
    
    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Jun 30, 2026
    Configuration menu
    Copy the full SHA
    945a0aa View commit details
    Browse the repository at this point in the history
  4. Bump the minor-patch group across 2 directories with 7 updates (#651)

    Bumps the minor-patch group with 4 updates in the / directory: [github.com/go-openapi/runtime](https://github.com/go-openapi/runtime), [github.com/go-openapi/strfmt](https://github.com/go-openapi/strfmt), [github.com/sigstore/rekor-tiles/v2](https://github.com/sigstore/rekor-tiles) and [golang.org/x/mod](https://github.com/golang/mod).
    Bumps the minor-patch group with 1 update in the /examples/oci-image-verification directory: [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry).
    
    
    Updates `github.com/go-openapi/runtime` from 0.32.3 to 0.32.4
    - [Release notes](https://github.com/go-openapi/runtime/releases)
    - [Commits](go-openapi/runtime@v0.32.3...v0.32.4)
    
    Updates `github.com/go-openapi/strfmt` from 0.26.3 to 0.26.4
    - [Release notes](https://github.com/go-openapi/strfmt/releases)
    - [Commits](go-openapi/strfmt@v0.26.3...v0.26.4)
    
    Updates `github.com/go-openapi/swag/conv` from 0.26.0 to 0.26.1
    - [Release notes](https://github.com/go-openapi/swag/releases)
    - [Commits](go-openapi/swag@v0.26.0...v0.26.1)
    
    Updates `github.com/sigstore/rekor-tiles/v2` from 2.2.2-0.20260601073857-5d098a2b6443 to 2.3.0
    - [Release notes](https://github.com/sigstore/rekor-tiles/releases)
    - [Changelog](https://github.com/sigstore/rekor-tiles/blob/main/RELEASE.md)
    - [Commits](https://github.com/sigstore/rekor-tiles/commits/v2.3.0)
    
    Updates `golang.org/x/crypto` from 0.52.0 to 0.53.0
    - [Commits](golang/crypto@v0.52.0...v0.53.0)
    
    Updates `golang.org/x/mod` from 0.36.0 to 0.37.0
    - [Commits](golang/mod@v0.36.0...v0.37.0)
    
    Updates `github.com/google/go-containerregistry` from 0.21.6 to 0.21.7
    - [Release notes](https://github.com/google/go-containerregistry/releases)
    - [Commits](google/go-containerregistry@v0.21.6...v0.21.7)
    
    ---
    updated-dependencies:
    - dependency-name: github.com/go-openapi/runtime
      dependency-version: 0.32.4
      dependency-type: direct:production
      update-type: version-update:semver-patch
      dependency-group: minor-patch
    - dependency-name: github.com/go-openapi/strfmt
      dependency-version: 0.26.4
      dependency-type: direct:production
      update-type: version-update:semver-patch
      dependency-group: minor-patch
    - dependency-name: github.com/go-openapi/swag/conv
      dependency-version: 0.26.1
      dependency-type: direct:production
      update-type: version-update:semver-patch
      dependency-group: minor-patch
    - dependency-name: github.com/sigstore/rekor-tiles/v2
      dependency-version: 2.3.0
      dependency-type: direct:production
      update-type: version-update:semver-minor
      dependency-group: minor-patch
    - dependency-name: golang.org/x/crypto
      dependency-version: 0.53.0
      dependency-type: direct:production
      update-type: version-update:semver-minor
      dependency-group: minor-patch
    - dependency-name: golang.org/x/mod
      dependency-version: 0.37.0
      dependency-type: direct:production
      update-type: version-update:semver-minor
      dependency-group: minor-patch
    - dependency-name: github.com/google/go-containerregistry
      dependency-version: 0.21.7
      dependency-type: direct:production
      update-type: version-update:semver-patch
      dependency-group: minor-patch
    ...
    
    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Jun 30, 2026
    Configuration menu
    Copy the full SHA
    d6ec891 View commit details
    Browse the repository at this point in the history
  5. Bump go-tuf to v2.4.2 (#652)

    Signed-off-by: Hayden <8418760+Hayden-IO@users.noreply.github.com>
    Hayden-IO authored Jun 30, 2026
    Configuration menu
    Copy the full SHA
    8a3361c View commit details
    Browse the repository at this point in the history

Commits on Jul 6, 2026

  1. Configuration menu
    Copy the full SHA
    cbf26e4 View commit details
    Browse the repository at this point in the history
  2. Bump the minor-patch group across 1 directory with 2 updates (#656)

    Bumps the minor-patch group with 2 updates in the / directory: [github.com/go-openapi/swag/conv](https://github.com/go-openapi/swag) and [github.com/sigstore/rekor](https://github.com/sigstore/rekor).
    
    
    Updates `github.com/go-openapi/swag/conv` from 0.26.1 to 0.27.0
    - [Release notes](https://github.com/go-openapi/swag/releases)
    - [Commits](go-openapi/swag@v0.26.1...v0.27.0)
    
    Updates `github.com/sigstore/rekor` from 1.5.2 to 1.5.3
    - [Release notes](https://github.com/sigstore/rekor/releases)
    - [Changelog](https://github.com/sigstore/rekor/blob/main/CHANGELOG.md)
    - [Commits](sigstore/rekor@v1.5.2...v1.5.3)
    
    ---
    updated-dependencies:
    - dependency-name: github.com/go-openapi/swag/conv
      dependency-version: 0.27.0
      dependency-type: direct:production
      update-type: version-update:semver-minor
      dependency-group: minor-patch
    - dependency-name: github.com/sigstore/rekor
      dependency-version: 1.5.3
      dependency-type: direct:production
      update-type: version-update:semver-patch
      dependency-group: minor-patch
    ...
    
    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Jul 6, 2026
    Configuration menu
    Copy the full SHA
    2eb9560 View commit details
    Browse the repository at this point in the history
  3. Bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 (#655)

    Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) from 9.2.1 to 9.3.0.
    - [Release notes](https://github.com/golangci/golangci-lint-action/releases)
    - [Commits](golangci/golangci-lint-action@82606bf...ba0d7d2)
    
    ---
    updated-dependencies:
    - dependency-name: golangci/golangci-lint-action
      dependency-version: 9.3.0
      dependency-type: direct:production
      update-type: version-update:semver-minor
    ...
    
    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Jul 6, 2026
    Configuration menu
    Copy the full SHA
    55aa624 View commit details
    Browse the repository at this point in the history
Loading