All pull requests

Pull requests

• Support enterprise GitHub Actions OIDC issuers

  #4509·bmendonca3 opened May 29, 2026·

  ·
  1

• fix(deps): update module github.com/go-jose/go-jose/v4 to v4.1.6 [security]

  #4506·renovate-bot opened May 9, 2026Contributor·1 task·

  ·
  1

• fix: normalise bare SHA BUILDER_REF before refs/tags/ prefix check in builder-fetch.sh

  #4502·shinagawa-web opened May 5, 2026·

  ·

• chore(deps): update dependency renovate to v42 [security]

  #4500·renovate-bot opened Apr 29, 2026Contributor·1 task·

  ·

• fix(deps): update module github.com/sigstore/sigstore to v1.10.4 [security]

  #4498·renovate-bot opened Apr 29, 2026Contributor·1 task·

  ·
  1

• fix(deps): update module github.com/sigstore/rekor to v1.5.2 [security]

  #4497·renovate-bot opened Apr 29, 2026Contributor·1 task·

  ·
  1

• fix(deps): update module github.com/sigstore/cosign/v2 to v2.6.2 [security]

  #4496·renovate-bot opened Apr 29, 2026Contributor·1 task·

  ·
  1

• chore(deps): bump handlebars from 4.7.8 to 4.7.9 in the npm_and_yarn group across 1 directory

  dependenciesjavascript
  #4480·dependabot[bot] opened Mar 29, 2026Bot·

  ·

• chore(deps): bump the npm_and_yarn group across 4 directories with 2 updates

  dependenciesjavascript
  #4479·dependabot[bot] opened Mar 27, 2026Bot·

  ·

• chore(deps): switch from gopkg.in/yaml.v3 to go.yaml.in/yaml/v3

  #4477·scop opened Mar 26, 2026·1 of 5 tasks·

  ·
  1

• chore(deps): bump the npm_and_yarn group across 10 directories with 5 updates

  dependenciesjavascript
  #4467·dependabot[bot] opened Feb 28, 2026Bot·

  ·

• chore(deps): bump the npm_and_yarn group across 8 directories with 5 updates

  dependenciesjavascript
  #4466·dependabot[bot] opened Feb 21, 2026Bot·

  ·

• fix: provide path to go.sum for caching

  #4441·HastD opened Oct 13, 2025·

  ·
  3

• chore(deps): update dependency org.apache.maven.plugins:maven-gpg-plugin to v3.2.8

  #4438·renovate-bot opened Oct 1, 2025Contributor·1 task·

  ·

• chore(deps): update github-actions (major)

  #4361·renovate-bot opened Aug 1, 2025Contributor·1 task·

  ·
  2

• fix(deps): update dependency org.apache.maven:maven-core to v3.10.0

  #4337·renovate-bot opened Jul 1, 2025Contributor·1 task·

  ·

• chore(deps): update github-actions

  #4336·renovate-bot opened Jul 1, 2025Contributor·1 task·

  ·
  1

• Fix typo multiple.intoto.json -> multiple.intoto.jsonl

  #4263·bblanchon opened Jun 2, 2025·

  ·
  1

• fix(deps): update go

  #4260·renovate-bot opened Jun 1, 2025Contributor·1 task·

  ·
  2

• chore(deps): bump the npm_and_yarn group across 7 directories with 1 update

  dependenciesjavascript
  #4238·dependabot[bot] opened May 15, 2025Bot·

  ·
  2

• fix(deps): update dependency @actions/github to v6.0.1

  #4229·renovate-bot opened May 1, 2025Contributor·1 task·

  ·

• chore(deps): update dependency yamllint to v1.38.0

  #4228·renovate-bot opened May 1, 2025Contributor·1 task·

  ·

• chore(deps): update npm dev

  #4174·renovate-bot opened Apr 1, 2025Contributor·

  ·

• chore: Update TODO comments

  #4150·ianlewis opened Mar 19, 2025Member·5 tasks done·

  ·
  1

• chore(deps): update dependency org.apache.maven.plugins:maven-deploy-plugin to v3.2.0

  #4131·renovate-bot opened Mar 1, 2025Contributor·1 task·

  ·