Skip to content

Bump sigstore from 4.1.0 to 4.1.1#11298

Merged
fzaninotto merged 1 commit into
masterfrom
dependabot/npm_and_yarn/sigstore-4.1.1
Jul 16, 2026
Merged

Bump sigstore from 4.1.0 to 4.1.1#11298
fzaninotto merged 1 commit into
masterfrom
dependabot/npm_and_yarn/sigstore-4.1.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 2, 2026

Copy link
Copy Markdown
Contributor

Bumps sigstore from 4.1.0 to 4.1.1.

Release notes

Sourced from sigstore's releases.

sigstore@4.1.1

Patch Changes

  • 7845532: Verification of OID certificate extensions
  • f074710: Require inclusion promise in Rekor entry when used as timestamp source
  • Updated dependencies [b5aa4f1]
  • Updated dependencies [7845532]
  • Updated dependencies [f074710]
    • @​sigstore/core@​3.2.1
    • @​sigstore/verify@​3.1.1
Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 2, 2026
Bumps [sigstore](https://github.com/sigstore/sigstore-js) from 4.1.0 to 4.1.1.
- [Release notes](https://github.com/sigstore/sigstore-js/releases)
- [Commits](https://github.com/sigstore/sigstore-js/compare/sigstore@4.1.0...sigstore@4.1.1)

---
updated-dependencies:
- dependency-name: sigstore
  dependency-version: 4.1.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/sigstore-4.1.1 branch from 431537d to 7e28c2b Compare July 16, 2026 05:21
@fzaninotto fzaninotto merged commit 7ee7217 into master Jul 16, 2026
7 of 10 checks passed
@fzaninotto fzaninotto deleted the dependabot/npm_and_yarn/sigstore-4.1.1 branch July 16, 2026 05:22
@fzaninotto fzaninotto added this to the 5.15.2 milestone Jul 16, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant