Repository navigation
chore(deps): bump the github-actions-all group (taiki-e/install-action v2.90.2, sigstore/cosign-installer v4.1.3) - #1701
Merged
Merged
Conversation
Codecov Report✅ All modified and coverable lines are covered by tests. 📢 Thoughts on this report? Let us know! |
…n v2.90.2, sigstore/cosign-installer v4.1.3) The same three-line diff as dependabot's #1648. That PR fell 5 commits behind main and did not respond to `@dependabot rebase` or `@dependabot recreate`. A server-side rebase would strip its commit signatures, so this branch carries the change instead, signed, on current main. - taiki-e/install-action 2.87.31 -> 2.90.2 (ci.yml, fuzz-smoke.yml) - sigstore/cosign-installer 3.9.1 -> 4.1.3 (release.yml). This is a major bump. release.yml pins `cosign-release: 'v2.4.1'` and already passes `--bundle` to `cosign sign-blob`. The v4.0.0 release notes say v4 "may still install Cosign v2.x" and that v3+ requires `--bundle`, which is already present. PR CI does not run release.yml, so the v0.91.0 release run is the first execution of this step. Checks: workflow_strict_check 0 failures, actionlint clean, all 55 Claim Check steps pass. Refs #1648 Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01YJK5LZZEkV5smCY1jKn18L
avrabe
force-pushed
the
deps-actions-1648
branch
from
November 11, 2026 09:47
4012b4f to
90543af
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
The same three-line diff as dependabot's #1648. That PR fell 5 commits
behind main and did not respond to
@dependabot rebaseor@dependabot recreate. A server-side rebase would strip its commitsignatures, so this branch carries the change instead, signed, on
current main.
bump. release.yml pins
cosign-release: 'v2.4.1'and already passes--bundletocosign sign-blob. The v4.0.0 release notes say v4"may still install Cosign v2.x" and that v3+ requires
--bundle,which is already present. PR CI does not run release.yml, so the
v0.91.0 release run is the first execution of this step.
Checks: workflow_strict_check 0 failures, actionlint clean, all 55
Claim Check steps pass.
Refs #1648
🤖 Generated with Claude Code
https://claude.ai/code/session_01YJK5LZZEkV5smCY1jKn18L