From 379a700ccb9f35468fce0a7d9b9a9f8adad840d0 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 30 Apr 2024 20:59:54 +0000 Subject: [PATCH] Bump kubernetes-sigs/release-actions in the all group Bumps the all group with 1 update: [kubernetes-sigs/release-actions](https://github.com/kubernetes-sigs/release-actions). Updates `kubernetes-sigs/release-actions` from 0.1.4 to 0.2.0 - [Release notes](https://github.com/kubernetes-sigs/release-actions/releases) - [Changelog](https://github.com/kubernetes-sigs/release-actions/blob/main/RELEASE.md) - [Commits](https://github.com/kubernetes-sigs/release-actions/compare/841d76a188a7c121231a863572e27012805715a2...2f8b9ec22aedc9ce15039b6c7716aa6c2907df1c) --- updated-dependencies: - dependency-name: kubernetes-sigs/release-actions dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all ... Signed-off-by: dependabot[bot] --- .github/workflows/release.yaml | 4 ++-- .github/workflows/snapshot.yaml | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index 94d5378..f8c8849 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -33,7 +33,7 @@ jobs: uses: sigstore/cosign-installer@59acb6260d9c0ba8f4a2f9d9b48431a222b68e20 # v3.5.0 - name: Install bom - uses: kubernetes-sigs/release-actions/setup-bom@841d76a188a7c121231a863572e27012805715a2 # v0.1.4 + uses: kubernetes-sigs/release-actions/setup-bom@2f8b9ec22aedc9ce15039b6c7716aa6c2907df1c # v0.2.0 - uses: ko-build/setup-ko@ace48d793556083a76f1e3e6068850c1f4a369aa # v0.6 @@ -82,7 +82,7 @@ jobs: run: echo "tag_name=${GITHUB_REF#refs/*/}" >> "$GITHUB_OUTPUT" - name: Install tejolote - uses: kubernetes-sigs/release-actions/setup-tejolote@841d76a188a7c121231a863572e27012805715a2 # v0.1.4 + uses: kubernetes-sigs/release-actions/setup-tejolote@2f8b9ec22aedc9ce15039b6c7716aa6c2907df1c # v0.2.0 - run: | tejolote attest --artifacts github://openvex/vexctl/${{ steps.tag.outputs.tag_name }} github://openvex/vexctl/"${GITHUB_RUN_ID}" --output vexctl.intoto.json --sign diff --git a/.github/workflows/snapshot.yaml b/.github/workflows/snapshot.yaml index 5b88227..50703a7 100644 --- a/.github/workflows/snapshot.yaml +++ b/.github/workflows/snapshot.yaml @@ -28,7 +28,7 @@ jobs: install-only: true - name: Install bom - uses: kubernetes-sigs/release-actions/setup-bom@841d76a188a7c121231a863572e27012805715a2 # v0.1.4 + uses: kubernetes-sigs/release-actions/setup-bom@2f8b9ec22aedc9ce15039b6c7716aa6c2907df1c # v0.2.0 - name: Run Snapshot run: make snapshot @@ -53,7 +53,7 @@ jobs: fetch-depth: 1 - name: Install tejolote - uses: kubernetes-sigs/release-actions/setup-tejolote@841d76a188a7c121231a863572e27012805715a2 # v0.1.4 + uses: kubernetes-sigs/release-actions/setup-tejolote@2f8b9ec22aedc9ce15039b6c7716aa6c2907df1c # v0.2.0 - run: | tejolote attest github://openvex/vexctl/"${GITHUB_RUN_ID}" --output vexctl.intoto.json