Skip to content

Bump sigstore/gh-action-sigstore-python from 3.2.0 to 3.3.0#370

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/github_actions/sigstore/gh-action-sigstore-python-3.3.0
Open

Bump sigstore/gh-action-sigstore-python from 3.2.0 to 3.3.0#370
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/github_actions/sigstore/gh-action-sigstore-python-3.3.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 26, 2026

Bumps sigstore/gh-action-sigstore-python from 3.2.0 to 3.3.0.

Release notes

Sourced from sigstore/gh-action-sigstore-python's releases.

v3.3.0

What's Changed

  • Dependency updates. Most importantly used sigstore-python is now version 4.2.0

Full Changelog: sigstore/gh-action-sigstore-python@v3.2.0...v3.3.0

Changelog

Sourced from sigstore/gh-action-sigstore-python's changelog.

Changelog

All notable changes to gh-action-sigstore-python will be documented in this file.

The format is based on Keep a Changelog.

All versions prior to 3.0.0 are untracked.

[Unreleased]

Commits
  • 04cffa1 build(deps): bump requests from 2.32.5 to 2.33.0 in /requirements (#342)
  • 69171e8 build(deps): bump charset-normalizer in the python-dependencies group (#340)
  • 40198d7 build(deps): bump github/codeql-action in the actions group (#338)
  • ca55bb0 build(deps): bump the python-dependencies group with 2 updates (#339)
  • 2736143 build(deps): bump the actions group with 3 updates (#335)
  • 9afbb88 build(deps): bump pyasn1 from 0.6.2 to 0.6.3 in /requirements (#337)
  • eb907b0 build(deps): bump pyopenssl from 25.3.0 to 26.0.0 in /requirements (#334)
  • 84eaebf build(deps): bump astral-sh/setup-uv in the actions group (#331)
  • 57c12be build(deps): bump charset-normalizer in the python-dependencies group (#332)
  • 57918d7 build(deps): bump pyjwt from 2.11.0 to 2.12.0 in /requirements (#333)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [sigstore/gh-action-sigstore-python](https://github.com/sigstore/gh-action-sigstore-python) from 3.2.0 to 3.3.0.
- [Release notes](https://github.com/sigstore/gh-action-sigstore-python/releases)
- [Changelog](https://github.com/sigstore/gh-action-sigstore-python/blob/main/CHANGELOG.md)
- [Commits](sigstore/gh-action-sigstore-python@v3.2.0...v3.3.0)

---
updated-dependencies:
- dependency-name: sigstore/gh-action-sigstore-python
  dependency-version: 3.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the github_actions Pull requests that update GitHub Actions code label Mar 26, 2026
@dependabot dependabot bot requested a review from tpvasconcelos as a code owner March 26, 2026 23:23
@dependabot dependabot bot added the github_actions Pull requests that update GitHub Actions code label Mar 26, 2026
@github-actions
Copy link
Copy Markdown

Thank you for submitting your first pull request with us! 🎉

Our response times may vary, but we'll get back to you as soon as we can!

To help us help you, please make sure you have ticked all the boxes in the pull request template.

Welcome aboard! 🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants