Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Awaiting Schedule

These updates are awaiting their schedule. Click on a checkbox to get an update now.

• chore(deps): update gcr.io/distroless/base:nonroot docker digest to 0e45386
• chore(deps): update dependency @types/node to v18.15.3

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• fix(deps): update go (github.com/in-toto/in-toto-golang, github.com/secure-systems-lab/go-securesystemslib, github.com/sigstore/cosign/v2, github.com/sigstore/sigstore, github.com/slsa-framework/slsa-github-generator, golang.org/x/mod, google.golang.org/protobuf)
• fix(deps): update module github.com/sigstore/cosign to v2

Detected dependencies

dockerfile

cli/experimental/service/Dockerfile

• golang 1.20@sha256:74a382917f6eaa7cc2d000dc2cd412a7f823f343b3b6268b20d84d057bc56718
• gcr.io/distroless/base nonroot@sha256:bac3b6ac934c1a5eac5a3971b881079bb0e2960cfb2b848a42790d36e517f8ce

github-actions

.github/workflows/release.yml

• actions/checkout v3.3.0@ac593985615ec2ede58e132d2e21d2b1cbd6127c
• slsa-framework/slsa-github-generator v1.5.0

gomod

go.mod

• go 1.18
• github.com/docker/go v1.5.1-1
• github.com/go-openapi/runtime v0.25.0
• github.com/google/go-cmp v0.5.9
• github.com/in-toto/in-toto-golang v0.6.1-0.20230209184401-f8269f61247e@f8269f61247e
• github.com/secure-systems-lab/go-securesystemslib v0.4.0
• github.com/sigstore/rekor v1.0.1
• github.com/sigstore/sigstore v1.5.1
• github.com/go-openapi/strfmt v0.21.3
• github.com/go-openapi/swag v0.22.3
• github.com/google/go-containerregistry v0.13.0
• github.com/gorilla/mux v1.8.0
• github.com/sigstore/cosign v1.13.1
• github.com/sigstore/cosign/v2 v2.0.0-rc.2
• github.com/slsa-framework/slsa-github-generator v1.4.0
• github.com/spf13/cobra v1.6.1
• golang.org/x/mod v0.8.0
• sigs.k8s.io/release-utils v0.7.3
• github.com/sigstore/protobuf-specs v0.1.1-0.20230310202450-c8a23a43dc1c@c8a23a43dc1c
• google.golang.org/protobuf v1.28.1

npm

actions/installer/package.json

• @actions/core ^1.9.1
• @actions/exec ^1.1.1
• @actions/github ^5.0.3
• @actions/io ^1.1.2
• @actions/tool-cache ^2.0.1
• nodejs ^0.0.0
• @types/jasmine 4.3.1
• @types/node 18.15.0
• @vercel/ncc 0.36.1
• eslint 8.36.0
• eslint-plugin-github 4.6.1
• jasmine 4.5.0
• prettier 2.8.4
• typescript 4.9.5

---

• Check this box to trigger a request for Renovate to run again on this repository