-
Notifications
You must be signed in to change notification settings - Fork 13
Comparing changes
Open a pull request
base repository: sigstore/gh-action-sigstore-python
base: v2.1.1
head repository: sigstore/gh-action-sigstore-python
compare: v3.0.0
- 15 commits
- 15 files changed
- 4 contributors
Commits on Jan 9, 2024
-
Signed-off-by: William Woodruff <william@trailofbits.com>
Configuration menu - View commit details
-
Copy full SHA for 8f4df93 - Browse repository at this point
Copy the full SHA 8f4df93View commit details -
build(deps): bump the actions group with 4 updates (#102)
Bumps the actions group with 4 updates: [actions/upload-artifact](https://github.com/actions/upload-artifact), [actions/checkout](https://github.com/actions/checkout), [actions/setup-python](https://github.com/actions/setup-python) and [actions/download-artifact](https://github.com/actions/download-artifact). Updates `actions/upload-artifact` from 3 to 4 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@v3...v4) Updates `actions/checkout` from 3 to 4 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@v3...v4) Updates `actions/setup-python` from 4 to 5 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](actions/setup-python@v4...v5) Updates `actions/download-artifact` from 3 to 4 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](actions/download-artifact@v3...v4) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/setup-python dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/download-artifact dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Configuration menu - View commit details
-
Copy full SHA for afe705f - Browse repository at this point
Copy the full SHA afe705fView commit details
Commits on Jan 10, 2024
-
Fix
release-signing-artifacts
behavior and docs (#103)* action: don't attempt to download artifacts on non-releases Signed-off-by: William Woodruff <william@trailofbits.com> * README: clarify release-signing-artifacts behavior Signed-off-by: William Woodruff <william@trailofbits.com> * add another selftest Signed-off-by: William Woodruff <william@trailofbits.com> --------- Signed-off-by: William Woodruff <william@trailofbits.com>
Configuration menu - View commit details
-
Copy full SHA for b3690e3 - Browse repository at this point
Copy the full SHA b3690e3View commit details
Commits on Jan 11, 2024
-
action: use shlex.split (#104)
* action: use shlex.split Closes #77. Signed-off-by: William Woodruff <william@trailofbits.com> * whitespace selftests Signed-off-by: William Woodruff <william@trailofbits.com> * document `inputs` a bit more Signed-off-by: William Woodruff <william@trailofbits.com> --------- Signed-off-by: William Woodruff <william@trailofbits.com>
Configuration menu - View commit details
-
Copy full SHA for faa37e3 - Browse repository at this point
Copy the full SHA faa37e3View commit details
Commits on Jan 25, 2024
-
Signed-off-by: William Woodruff <william@trailofbits.com>
Configuration menu - View commit details
-
Copy full SHA for bd90115 - Browse repository at this point
Copy the full SHA bd90115View commit details -
build(deps): bump the actions group with 1 update (#107)
Bumps the actions group with 1 update: [peter-evans/create-issue-from-file](https://github.com/peter-evans/create-issue-from-file). Updates `peter-evans/create-issue-from-file` from 4.0.1 to 5.0.0 - [Release notes](https://github.com/peter-evans/create-issue-from-file/releases) - [Commits](peter-evans/create-issue-from-file@433e51a...24452a7) --- updated-dependencies: - dependency-name: peter-evans/create-issue-from-file dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Configuration menu - View commit details
-
Copy full SHA for 8579d48 - Browse repository at this point
Copy the full SHA 8579d48View commit details
Commits on Feb 23, 2024
-
Allow empty inputs with release artifacts (#110)
* Make inputs optional on releases if release-signing-artifacts is set to true Signed-off-by: Jean-Christophe Morin <jean_christophe_morin@hotmail.com> * Add basic .gitignore to ignore venv Signed-off-by: Jean-Christophe Morin <jean_christophe_morin@hotmail.com> * Make behavior more explicit Signed-off-by: Jean-Christophe Morin <jean_christophe_morin@hotmail.com> --------- Signed-off-by: Jean-Christophe Morin <jean_christophe_morin@hotmail.com>
Configuration menu - View commit details
-
Copy full SHA for 08a568c - Browse repository at this point
Copy the full SHA 08a568cView commit details
Commits on Mar 8, 2024
-
build(deps): bump the actions group with 1 update (#111)
Bumps the actions group with 1 update: [softprops/action-gh-release](https://github.com/softprops/action-gh-release). Updates `softprops/action-gh-release` from 1 to 2 - [Release notes](https://github.com/softprops/action-gh-release/releases) - [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md) - [Commits](softprops/action-gh-release@v1...v2) --- updated-dependencies: - dependency-name: softprops/action-gh-release dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Configuration menu - View commit details
-
Copy full SHA for 4dde77f - Browse repository at this point
Copy the full SHA 4dde77fView commit details
Commits on Jun 7, 2024
-
schedule-selftest: reduce nagging (#134)
Signed-off-by: William Woodruff <william@trailofbits.com>
Configuration menu - View commit details
-
Copy full SHA for 26de745 - Browse repository at this point
Copy the full SHA 26de745View commit details
Commits on Jun 17, 2024
-
requirements: sigstore ~3.0 (#140)
* requirements: sigstore ~3.0 Signed-off-by: William Woodruff <william@trailofbits.com> * selftest: update filenames Signed-off-by: William Woodruff <william@trailofbits.com> * action: update another path Signed-off-by: William Woodruff <william@trailofbits.com> * action: remove deprecated settings Signed-off-by: William Woodruff <william@trailofbits.com> * README: remove old docs Signed-off-by: William Woodruff <william@trailofbits.com> --------- Signed-off-by: William Woodruff <william@trailofbits.com>
Configuration menu - View commit details
-
Copy full SHA for 9466100 - Browse repository at this point
Copy the full SHA 9466100View commit details
Commits on Jul 4, 2024
-
action: use a venv to prevent PEP 668 errors (#145)
* action: use a venv to prevent PEP 668 errors Signed-off-by: William Woodruff <william@trailofbits.com> * action: use sys.executable Signed-off-by: William Woodruff <william@trailofbits.com> * fight with Windows Signed-off-by: William Woodruff <william@trailofbits.com> * setup: minimum Python is 3.8 This has been true for a while. Signed-off-by: William Woodruff <william@trailofbits.com> --------- Signed-off-by: William Woodruff <william@trailofbits.com>
Configuration menu - View commit details
-
Copy full SHA for 1ddeb82 - Browse repository at this point
Copy the full SHA 1ddeb82View commit details
Commits on Jul 8, 2024
-
action: flip
release-signing-artifacts
(#142)Signed-off-by: William Woodruff <william@trailofbits.com>
Configuration menu - View commit details
-
Copy full SHA for 16fbe9a - Browse repository at this point
Copy the full SHA 16fbe9aView commit details
Commits on Jul 9, 2024
-
action: remove old output settings (#146)
* action: remove old output settings Signed-off-by: William Woodruff <william@trailofbits.com> * selftest: remove old test ref Signed-off-by: William Woodruff <william@trailofbits.com> --------- Signed-off-by: William Woodruff <william@trailofbits.com>
Configuration menu - View commit details
-
Copy full SHA for 551a497 - Browse repository at this point
Copy the full SHA 551a497View commit details -
* Workflows: remove default input arg from action call Signed-off-by: Jussi Kukkonen <jkukkonen@google.com> * workflows: Remove unnecessary selftest release-signing-artifacts defaults to "true" so the removed test now duplicates the previous test. We could try testing the release-signing-artifacts == "false" but that's a bit trickier since it could only be done in a release event... Signed-off-by: Jussi Kukkonen <jkukkonen@google.com> * workflows: Drop recently removed job from needs-list Signed-off-by: Jussi Kukkonen <jkukkonen@google.com> --------- Signed-off-by: Jussi Kukkonen <jkukkonen@google.com>
Configuration menu - View commit details
-
Copy full SHA for da238ad - Browse repository at this point
Copy the full SHA da238adView commit details
Commits on Jul 15, 2024
-
Configuration menu - View commit details
-
Copy full SHA for f514d46 - Browse repository at this point
Copy the full SHA f514d46View commit details
This comparison is taking too long to generate.
Unfortunately it looks like we can’t render this comparison for you right now. It might be too big, or there might be something weird with your repository.
You can try running this command locally to see the comparison on your machine:
git diff v2.1.1...v3.0.0