From 5157e43e19935b148ab6c2350d32ad729ac5b0c5 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 2 Aug 2024 17:26:33 +0000 Subject: [PATCH 1/3] Bump sigstore/gh-action-sigstore-python from 2.1.1 to 3.0.0 Bumps [sigstore/gh-action-sigstore-python](https://github.com/sigstore/gh-action-sigstore-python) from 2.1.1 to 3.0.0. - [Release notes](https://github.com/sigstore/gh-action-sigstore-python/releases) - [Changelog](https://github.com/sigstore/gh-action-sigstore-python/blob/main/CHANGELOG.md) - [Commits](https://github.com/sigstore/gh-action-sigstore-python/compare/v2.1.1...v3.0.0) --- updated-dependencies: - dependency-name: sigstore/gh-action-sigstore-python dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/ci.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 36aade25..dcb2026d 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -82,7 +82,7 @@ jobs: - name: Sign artifact if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/') - uses: sigstore/gh-action-sigstore-python@v2.1.1 + uses: sigstore/gh-action-sigstore-python@v3.0.0 with: inputs: ./medusa-*.tar.gz From 3853d8c1214a5c7f238f4debe2dffb544a93b6f9 Mon Sep 17 00:00:00 2001 From: Anish Naik Date: Tue, 15 Oct 2024 15:50:14 -0400 Subject: [PATCH 2/3] update to v0.1.8 --- .github/workflows/ci.yml | 2 +- cmd/root.go | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 6c5afec0..956ab7f2 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -92,7 +92,7 @@ jobs: name: medusa-${{ runner.os }}-${{ runner.arch }} path: | ./medusa-*.tar.gz - ./medusa-*.tar.gz.sigstore + ./medusa-*.tar.gz.sigstore.json release: needs: [build] diff --git a/cmd/root.go b/cmd/root.go index b4d122d9..6e710b61 100644 --- a/cmd/root.go +++ b/cmd/root.go @@ -7,7 +7,7 @@ import ( "os" ) -const version = "0.1.7" +const version = "0.1.8" // rootCmd represents the root CLI command object which all other commands stem from. var rootCmd = &cobra.Command{ From 3243832b9920dd16aa873f937c5a28a27276c5da Mon Sep 17 00:00:00 2001 From: Anish Naik Date: Tue, 15 Oct 2024 15:53:00 -0400 Subject: [PATCH 3/3] update to new json format --- .github/workflows/ci.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 956ab7f2..6983fbc2 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -117,7 +117,7 @@ jobs: name: "${{ github.ref_name }}" files: | ./medusa-*.tar.gz - ./medusa-*.tar.gz.sigstore + ./medusa-*.tar.gz.sigstore.json lint: runs-on: ubuntu-latest