Skip to content

🌱 Bump github.com/sigstore/fulcio from 1.8.5 to 1.8.6 - #2793

Merged
openshift-merge-bot[bot] merged 1 commit into
mainfrom
dependabot/go_modules/github.com/sigstore/fulcio-1.8.6
Jul 3, 2026
Merged

🌱 Bump github.com/sigstore/fulcio from 1.8.5 to 1.8.6#2793
openshift-merge-bot[bot] merged 1 commit into
mainfrom
dependabot/go_modules/github.com/sigstore/fulcio-1.8.6

Conversation

@dependabot

@dependabotdependabotBot commented on behalf of githubJul 1, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/sigstore/fulcio from 1.8.5 to 1.8.6.

Release notes

Sourced from github.com/sigstore/fulcio's releases.

v1.8.6

Changelog

  • 378c654f48c3bafdced04ead7010aab2cb4c6ca1 Block cross-host redirects and restrict bearer token to expected host (#2354)
  • 39b48e6a8f2efe1809a1b19b4301666c3fd36667 Include raw subject in certificates (#2307)
  • 80eaed06e911cdfd26dd18f02b8e862f7f6ee453 Update Azure AKS OIDC issuer URL regex (#2266)
  • 001376a50932095cf4b6e65299ed2d29abe83524 add support for new circleci root issuer (#2278)

Thanks for all contributors!

Changelog

Sourced from github.com/sigstore/fulcio's changelog.

v1.8.6

Features

  • Include raw subject in certificates (#2307)
Commits
  • 378c654 Block cross-host redirects and restrict bearer token to expected host (#2354)
  • 7a5d3e3 bump builder image to use go1.26.3 (#2353)
  • a05982e build(deps): bump go.step.sm/crypto from 0.75.0 to 0.81.0 (#2348)
  • dfa63a8 build(deps): bump golang from 313faae to 2d6c802 (#2344)
  • 7b3a344 build(deps): bump google.golang.org/api from 0.279.0 to 0.280.0 (#2349)
  • 9290f7f build(deps): bump the all group with 2 updates (#2350)
  • 423d535 build(deps): bump nginx from 1.31.0 to 1.31.1 in the all group (#2352)
  • 19a3f8e build(deps): bump the all group across 1 directory with 6 updates (#2337)
  • 6b597ce build(deps): bump google.golang.org/api from 0.276.0 to 0.279.0 (#2338)
  • 0d1dc79 build(deps): bump nginx from 1.29.8 to 1.31.0 in the all group (#2342)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabotdependabotBot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jul 1, 2026
@netlify

netlifyBot commented Jul 1, 2026

Copy link
Copy Markdown

Deploy Preview for olmv1 ready!

NameLink
🔨 Latest commite7ee0c8
🔍 Latest deploy loghttps://app.netlify.com/projects/olmv1/deploys/6a47ac660de4250008be0ec4
😎 Deploy Previewhttps://deploy-preview-2793--olmv1.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.
🤖 Make changesRun an agent on this branch

To edit notification comments on pull requests, go to your Netlify project configuration.

@netlify

netlifyBot commented Jul 1, 2026

Copy link
Copy Markdown

Deploy Preview for olmv1 failed.

NameLink
🔨 Latest commit79a7915
🔍 Latest deploy loghttps://app.netlify.com/projects/olmv1/deploys/6a451e956d2da6000765d6e4

CopilotAI review requested due to automatic review settings July 1, 2026 14:05
CopilotAI reviewed Jul 1, 2026

CopilotAI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot can't review bot-authored pull requests automatically. A user with Copilot access can request a review manually.

@openshift-ciopenshift-ciBot added the lgtm Indicates that a PR is ready to be merged. label Jul 1, 2026
@tmshort

Copy link
Copy Markdown
Contributor

/approve

@openshift-ciopenshift-ciBot added approved Indicates a PR has been approved by an approver from all required OWNERS files. needs-rebase Indicates a PR cannot be merged because it has merge conflicts with HEAD. labels Jul 1, 2026
@tmshort

Copy link
Copy Markdown
Contributor

@dependabot rebase

@dependabot@github

dependabotBot commented on behalf of githubJul 2, 2026

Copy link
Copy Markdown
ContributorAuthor

I can't perform the requested action because I don't have any knowledge about this pull request.

@tmshort

Copy link
Copy Markdown
Contributor

@dependabot rebase

@dependabot@github

dependabotBot commented on behalf of githubJul 2, 2026

Copy link
Copy Markdown
ContributorAuthor

I can't perform the requested action because I don't have any knowledge about this pull request.

@tmshort

Copy link
Copy Markdown
Contributor

Dependabot seems broken

Bumps [github.com/sigstore/fulcio](https://github.com/sigstore/fulcio) from 1.8.5 to 1.8.6.
- [Release notes](https://github.com/sigstore/fulcio/releases)
- [Changelog](https://github.com/sigstore/fulcio/blob/main/CHANGELOG.md)
- [Commits](sigstore/fulcio@v1.8.5...v1.8.6)
---
updated-dependencies:
- dependency-name: github.com/sigstore/fulcio
dependency-version: 1.8.6
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
@perdasilva
perdasilvaforce-pushed the dependabot/go_modules/github.com/sigstore/fulcio-1.8.6 branch from 79a7915 to e7ee0c8CompareJuly 3, 2026 12:34
@openshift-ciopenshift-ciBot removed lgtm Indicates that a PR is ready to be merged. needs-rebase Indicates a PR cannot be merged because it has merge conflicts with HEAD. labels Jul 3, 2026
@openshift-ciopenshift-ciBot added the lgtm Indicates that a PR is ready to be merged. label Jul 3, 2026
@openshift-ci

Copy link
Copy Markdown

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: perdasilva, rashmigottipati, tmshort

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-merge-bot
openshift-merge-botBot merged commit 395bb86 into mainJul 3, 2026
23 checks passed
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approvedIndicates a PR has been approved by an approver from all required OWNERS files.dependenciesPull requests that update a dependency filegoPull requests that update Go codelgtmIndicates that a PR is ready to be merged.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants

@tmshort@perdasilva@rashmigottipati