- Notifications
You must be signed in to change notification settings - Fork13
Comparing changes
Open a pull request
base repository:sigstore/gh-action-sigstore-python
Uh oh!
There was an error while loading.Please reload this page.
base:v2.1.1
head repository:sigstore/gh-action-sigstore-python
Uh oh!
There was an error while loading.Please reload this page.
compare:v3.0.0
- 15commits
- 15files changed
- 4contributors
Commits on Jan 9, 2024
Signed-off-by: William Woodruff <william@trailofbits.com>
woodruffw authoredJan 9, 2024 build(deps): bump the actions group with 4 updates (#102)
Bumps the actions group with 4 updates: [actions/upload-artifact](https://github.com/actions/upload-artifact), [actions/checkout](https://github.com/actions/checkout), [actions/setup-python](https://github.com/actions/setup-python) and [actions/download-artifact](https://github.com/actions/download-artifact).Updates `actions/upload-artifact` from 3 to 4- [Release notes](https://github.com/actions/upload-artifact/releases)- [Commits](actions/upload-artifact@v3...v4)Updates `actions/checkout` from 3 to 4- [Release notes](https://github.com/actions/checkout/releases)- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)- [Commits](actions/checkout@v3...v4)Updates `actions/setup-python` from 4 to 5- [Release notes](https://github.com/actions/setup-python/releases)- [Commits](actions/setup-python@v4...v5)Updates `actions/download-artifact` from 3 to 4- [Release notes](https://github.com/actions/download-artifact/releases)- [Commits](actions/download-artifact@v3...v4)---updated-dependencies:- dependency-name: actions/upload-artifact dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions- dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions- dependency-name: actions/setup-python dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions- dependency-name: actions/download-artifact dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions...Signed-off-by: dependabot[bot] <support@github.com>Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
dependabot[bot] authoredJan 9, 2024
Commits on Jan 10, 2024
Fix
release-signing-artifacts
behavior and docs (#103)* action: don't attempt to download artifacts on non-releasesSigned-off-by: William Woodruff <william@trailofbits.com>* README: clarify release-signing-artifacts behaviorSigned-off-by: William Woodruff <william@trailofbits.com>* add another selftestSigned-off-by: William Woodruff <william@trailofbits.com>---------Signed-off-by: William Woodruff <william@trailofbits.com>
woodruffw authoredJan 10, 2024
Commits on Jan 11, 2024
action: use shlex.split (#104)
* action: use shlex.splitCloses#77.Signed-off-by: William Woodruff <william@trailofbits.com>* whitespace selftestsSigned-off-by: William Woodruff <william@trailofbits.com>* document `inputs` a bit moreSigned-off-by: William Woodruff <william@trailofbits.com>---------Signed-off-by: William Woodruff <william@trailofbits.com>
woodruffw authoredJan 11, 2024
Commits on Jan 25, 2024
Signed-off-by: William Woodruff <william@trailofbits.com>
woodruffw authoredJan 25, 2024 build(deps): bump the actions group with 1 update (#107)
Bumps the actions group with 1 update: [peter-evans/create-issue-from-file](https://github.com/peter-evans/create-issue-from-file).Updates `peter-evans/create-issue-from-file` from 4.0.1 to 5.0.0- [Release notes](https://github.com/peter-evans/create-issue-from-file/releases)- [Commits](peter-evans/create-issue-from-file@433e51a...24452a7)---updated-dependencies:- dependency-name: peter-evans/create-issue-from-file dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions...Signed-off-by: dependabot[bot] <support@github.com>Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
dependabot[bot] authoredJan 25, 2024
Commits on Feb 23, 2024
Allow empty inputs with release artifacts (#110)
* Make inputs optional on releases if release-signing-artifacts is set to trueSigned-off-by: Jean-Christophe Morin <jean_christophe_morin@hotmail.com>* Add basic .gitignore to ignore venvSigned-off-by: Jean-Christophe Morin <jean_christophe_morin@hotmail.com>* Make behavior more explicitSigned-off-by: Jean-Christophe Morin <jean_christophe_morin@hotmail.com>---------Signed-off-by: Jean-Christophe Morin <jean_christophe_morin@hotmail.com>
JeanChristopheMorinPerso authoredFeb 23, 2024
Commits on Mar 8, 2024
build(deps): bump the actions group with 1 update (#111)
Bumps the actions group with 1 update: [softprops/action-gh-release](https://github.com/softprops/action-gh-release).Updates `softprops/action-gh-release` from 1 to 2- [Release notes](https://github.com/softprops/action-gh-release/releases)- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)- [Commits](softprops/action-gh-release@v1...v2)---updated-dependencies:- dependency-name: softprops/action-gh-release dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions...Signed-off-by: dependabot[bot] <support@github.com>Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Commits on Jun 7, 2024
schedule-selftest: reduce nagging (#134)
Signed-off-by: William Woodruff <william@trailofbits.com>
Commits on Jun 17, 2024
requirements: sigstore ~3.0 (#140)
* requirements: sigstore ~3.0Signed-off-by: William Woodruff <william@trailofbits.com>* selftest: update filenamesSigned-off-by: William Woodruff <william@trailofbits.com>* action: update another pathSigned-off-by: William Woodruff <william@trailofbits.com>* action: remove deprecated settingsSigned-off-by: William Woodruff <william@trailofbits.com>* README: remove old docsSigned-off-by: William Woodruff <william@trailofbits.com>---------Signed-off-by: William Woodruff <william@trailofbits.com>
Commits on Jul 4, 2024
action: use a venv to prevent PEP 668 errors (#145)
* action: use a venv to prevent PEP 668 errorsSigned-off-by: William Woodruff <william@trailofbits.com>* action: use sys.executableSigned-off-by: William Woodruff <william@trailofbits.com>* fight with WindowsSigned-off-by: William Woodruff <william@trailofbits.com>* setup: minimum Python is 3.8This has been true for a while.Signed-off-by: William Woodruff <william@trailofbits.com>---------Signed-off-by: William Woodruff <william@trailofbits.com>
Commits on Jul 8, 2024
action: flip
release-signing-artifacts
(#142)Signed-off-by: William Woodruff <william@trailofbits.com>
Commits on Jul 9, 2024
action: remove old output settings (#146)
* action: remove old output settingsSigned-off-by: William Woodruff <william@trailofbits.com>* selftest: remove old test refSigned-off-by: William Woodruff <william@trailofbits.com>---------Signed-off-by: William Woodruff <william@trailofbits.com>
* Workflows: remove default input arg from action callSigned-off-by: Jussi Kukkonen <jkukkonen@google.com>* workflows: Remove unnecessary selftestrelease-signing-artifacts defaults to "true" so the removed test nowduplicates the previous test.We could try testing the release-signing-artifacts == "false" but that'sa bit trickier since it could only be done in a release event...Signed-off-by: Jussi Kukkonen <jkukkonen@google.com>* workflows: Drop recently removed job from needs-listSigned-off-by: Jussi Kukkonen <jkukkonen@google.com>---------Signed-off-by: Jussi Kukkonen <jkukkonen@google.com>
This comparison is taking too long to generate.
Unfortunately it looks like we can’t render this comparison for you right now. It might be too big, or there might be something weird with your repository.
You can try running this command locally to see the comparison on your machine:git diff v2.1.1...v3.0.0
Uh oh!
There was an error while loading.Please reload this page.