tkmind/tkmind_go
1
0
Fork 0
Code Issues Pull Requests Actions 4 Packages Projects Releases Wiki Activity

chore(deps): bump sigstore-verify from 0.10.0 to 0.11.0 (#10856)

Browse Source 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Douwe M Osinga <douwe@sidewalklabs.com>
This commit is contained in:
dependabot[bot]
2026-08-11 15:26:14 +02:00
committed by GitHub
parent ca65f8ca6b
commit 31d7f504c1
3 changed files with 19 additions and 23 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Cargo.lock
Generated
+18 -18
View File
@@ -10113,9 +10113,9 @@ dependencies = [
[[package]]
name = "sigstore-bundle"
version = "0.10.0"
version = "0.11.0"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "18b51b097b7e9d898efad51e1031c855ce4008b4866d0c38ac8b0fac5745a84c"
checksum = "5948e95f63e900fa92936ecf72c7f2251f83d27560a35a4aae560cc745f8b687"
dependencies = [
"base64 0.22.1",
"hex",
@@ -10130,9 +10130,9 @@ dependencies = [
[[package]]
name = "sigstore-crypto"
version = "0.10.0"
version = "0.11.0"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "1210ea5dd0dd07b1466449a6c5c79000f8ca10ac30b4e8f64031c3bed4c5c662"
checksum = "22f27364b37bec104a904f10a675c8cdf05d5e48a980569368f0cd0c119b2652"
dependencies = [
"aws-lc-rs",
"base64 0.22.1",
@@ -10152,9 +10152,9 @@ dependencies = [
[[package]]
name = "sigstore-merkle"
version = "0.10.0"
version = "0.11.0"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "9ae98f8a270885497dbe84e6dae10fa29066df0388f62980923728e38d844716"
checksum = "0ee85fd9fb550efd7c8a59447cb0ef4eb02f1258f3ffa80c88d38427c3930af3"
dependencies = [
"base64 0.22.1",
"hex",
@@ -10165,9 +10165,9 @@ dependencies = [
[[package]]
name = "sigstore-rekor"
version = "0.10.0"
version = "0.11.0"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "4e1c153f4f89f7570d0f625f660cadcb1b2fba72583f378d2d2b308c752ac45f"
checksum = "9b97c5a866f849a9445ae657bef0caa2db053a82827e6dae3a2b3de9c15a6a1a"
dependencies = [
"base64 0.22.1",
"hex",
@@ -10183,9 +10183,9 @@ dependencies = [
[[package]]
name = "sigstore-trust-root"
version = "0.10.0"
version = "0.11.0"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "ded6afc37295a10dba6569e033dd15f85f04f00980bfcf2c64009bc8ed279985"
checksum = "389b54d1b8ace20ba86fdf90e5e655495f65f1abbc7d5d0eb7494defa9ad32f0"
dependencies = [
"base64 0.22.1",
"hex",
@@ -10202,9 +10202,9 @@ dependencies = [
[[package]]
name = "sigstore-tsa"
version = "0.10.0"
version = "0.11.0"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "a88505b71600a791e52bed3777ed9cfeefd4b03dee6575d38c5542ae80e2bbdc"
checksum = "b58fe92d4d8cf4b7215b927b70bc1245b6e0d70d801febdfe0cd265ad97ebf8b"
dependencies = [
"aws-lc-rs",
"base64 0.22.1",
@@ -10228,9 +10228,9 @@ dependencies = [
[[package]]
name = "sigstore-tuf"
version = "0.10.0"
version = "0.11.0"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "dfc7cced094bd306ef561312cfffa3ea05ac7eea4a62cfa81680c07a10addbc0"
checksum = "eedac50883a917b7b434db22e2e6e853ace8c00f4a9c27f53e1e9c87e6d89fe4"
dependencies = [
"globset",
"hex",
@@ -10250,9 +10250,9 @@ dependencies = [
[[package]]
name = "sigstore-types"
version = "0.10.0"
version = "0.11.0"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "56f034e86c3b8d91b32608c83f4a18939eed32c6ca08d17d2f52b88be365aac6"
checksum = "236474c535a3157839926a0ae18f9c0c22b151e49634da6e5b18ad7cac8a3b69"
dependencies = [
"base64 0.22.1",
"hex",
@@ -10264,9 +10264,9 @@ dependencies = [
[[package]]
name = "sigstore-verify"
version = "0.10.0"
version = "0.11.0"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "f4720f300d093ecac6dcd75d4498fd1b2d9133600e679837bb9d944a4229eda7"
checksum = "558f71aad0e1c5925d29ae2024f55f0f8898a7ad450c93668f99086624c421e0"
dependencies = [
"base64 0.22.1",
"cms",
crates/goose-cli/Cargo.toml
+1 -1
View File
@@ -63,7 +63,7 @@ urlencoding = { workspace = true }
clap_complete = { version = "4", default-features = false }
comfy-table = { version = "7", default-features = false }
sha2 = { workspace = true }
sigstore-verify = { version = "0.10", default-features = false, optional = true }
sigstore-verify = { version = "0.11", default-features = false, optional = true }
axum.workspace = true
axum-server = { version = "0.8", default-features = false, optional = true }
clap_complete_nushell = { version = "4", default-features = false }
crates/goose-cli/src/commands/update.rs
-4
View File
@@ -170,10 +170,6 @@ fn verify_bundle(
let result = sigstore_verify::verify(artifact_digest, &bundle, policy, trusted_root)
.map_err(|e| anyhow::anyhow!("{e}"))?;
if !result.success {
bail!("Verification unsuccessful");
}
let identity = result
.identity
.as_deref()