8000 Comparing v2.1.1...v3.0.0 · sigstore/gh-action-sigstore-python · GitHub
[go: up one dir, main page]

Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: sigstore/gh-action-sigstore-python
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v2.1.1
Choose a base ref
...
head repository: sigstore/gh-action-sigstore-python
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v3.0.0
Choose a head ref
  • 15 commits
  • 15 files changed
  • 4 contributors

Commits on Jan 9, 2024

  1. add dependabot config (#101)

    Signed-off-by: William Woodruff <william@trailofbits.com>
    woodruffw authored Jan 9, 2024
    Configuration menu
    Copy the full SHA
    8f4df93 View commit details
    Browse the repository at this point in the history
  2. build(deps): bump the actions group with 4 updates (#102)

    Bumps the actions group with 4 updates: [actions/upload-artifact](https://github.com/actions/upload-artifact), [actions/checkout](https://github.com/actions/checkout), [actions/setup-python](https://github.com/actions/setup-python) and [actions/download-artifact](https://github.com/actions/download-artifact).
    
    
    Updates `actions/upload-artifact` from 3 to 4
    - [Release notes](https://github.com/actions/upload-artifact/releases)
    - [Commits](actions/upload-artifact@v3...v4)
    
    Updates `actions/checkout` from 3 to 4
    - [Release notes](https://github.com/actions/checkout/releases)
    - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
    - [Commits](actions/checkout@v3...v4)
    
    Updates `actions/setup-python` from 4 to 5
    - [Release notes](https://github.com/actions/setup-python/releases)
    - [Commits](actions/setup-python@v4...v5)
    
    Updates `actions/download-artifact` from 3 to 4
    - [Release notes](https://github.com/actions/download-artifact/releases)
    - [Commits](actions/download-artifact@v3...v4)
    
    ---
    updated-dependencies:
    - dependency-name: actions/upload-artifact
      dependency-type: direct:production
      update-type: version-update:semver-major
      dependency-group: actions
    - dependency-name: actions/checkout
      dependency-type: direct:production
      update-type: version-update:semver-major
      dependency-group: actions
    - dependency-name: actions/setup-python
      dependency-type: direct:production
      update-type: version-update:semver-major
      dependency-group: actions
    - dependency-name: actions/download-artifact
      dependency-type: direct:production
      update-type: version-update:semver-major
      dependency-group: actions
    ...
    
    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Jan 9, 2024
    Configuration menu
    Copy the full SHA
    afe705f View commit details
    Browse the repository at this point in the history

Commits on Jan 10, 2024

  1. Fix release-signing-artifacts behavior and docs (#103)

    * action: don't attempt to download artifacts on non-releases
    
    Signed-off-by: William Woodruff <william@trailofbits.com>
    
    * README: clarify release-signing-artifacts behavior
    
    Signed-off-by: William Woodruff <william@trailofbits.com>
    
    * add another selftest
    
    Signed-off-by: William Woodruff <william@trailofbits.com>
    
    ---------
    
    Signed-off-by: William Woodruff <william@trailofbits.com>
    woodruffw authored Jan 10, 2024
    Configuration menu
    Copy the full SHA
    b3690e3 View commit details
    Browse the repository at this point in the history

Commits on Jan 11, 2024

  1. action: use shlex.split (#104)

    * action: use shlex.split
    
    Closes #77.
    
    Signed-off-by: William Woodruff <william@trailofbits.com>
    
    * whitespace selftests
    
    Signed-off-by: William Woodruff <william@trailofbits.com>
    
    * document `inputs` a bit more
    
    Signed-off-by: William Woodruff <william@trailofbits.com>
    
    ---------
    
    Signed-off-by: William Woodruff <william@trailofbits.com>
    woodruffw authored Jan 11, 2024
    Configuration menu
    Copy the full SHA
    faa37e3 View commit details
    Browse the repository at this point in the history

Commits on Jan 25, 2024

  1. action: allow ** globs (#106)

    Signed-off-by: William Woodruff <william@trailofbits.com>
    woodruffw authored Jan 25, 2024
    Configuration menu
    Copy the full SHA
    bd90115 View commit details
    Browse the repository at this point in the history
  2. build(deps): bump the actions group with 1 update (#107)

    Bumps the actions group with 1 update: [peter-evans/create-issue-from-file](https://github.com/peter-evans/create-issue-from-file).
    
    
    Updates `peter-evans/create-issue-from-file` from 4.0.1 to 5.0.0
    - [Release notes](https://github.com/peter-evans/create-issue-from-file/releases)
    - [Commits](peter-evans/create-issue-from-file@433e51a...24452a7)
    
    ---
    updated-dependencies:
    - dependency-name: peter-evans/create-issue-from-file
      dependency-type: direct:production
      update-type: version-update:semver-major
      dependency-group: actions
    ...
    
    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Jan 25, 2024
    Configuration menu
    Copy the full SHA
    8579d48 View commit details
    Browse the repository at this point in the history

Commits on Feb 23, 2024

  1. Allow empty inputs with release artifacts (#110)

    * Make inputs optional on releases if release-signing-artifacts is set to true
    
    Signed-off-by: Jean-Christophe Morin <jean_christophe_morin@hotmail.com>
    
    * Add basic .gitignore to ignore venv
    
    Signed-off-by: Jean-Christophe Morin <jean_christophe_morin@hotmail.com>
    
    * Make behavior more explicit
    
    Signed-off-by: Jean-Christophe Morin <jean_christophe_morin@hotmail.com>
    
    ---------
    
    Signed-off-by: Jean-Christophe Morin <jean_christophe_morin@hotmail.com>
    JeanChristopheMorinPerso authored Feb 23, 2024
    Configuration menu
    Copy the full SHA
    08a568c View commit details
    Browse the repository at this point in the history

Commits on Mar 8, 2024

  1. build(deps): bump the actions group with 1 update (#111)

    Bumps the actions group with 1 update: [softprops/action-gh-release](https://github.com/softprops/action-gh-release).
    
    
    Updates `softprops/action-gh-release` from 1 to 2
    - [Release notes](https://github.com/softprops/action-gh-release/releases)
    - [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
    - [Commits](softprops/action-gh-release@v1...v2)
    
    ---
    updated-dependencies:
    - dependency-name: softprops/action-gh-release
      dependency-type: direct:production
      update-type: version-update:semver-major
      dependency-group: actions
    ...
    
    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Mar 8, 2024
    Configuration menu
    Copy the full SHA
    4dde77f View commit details
    Browse the repository at this point in the history

Commits on Jun 7, 2024

  1. schedule-selftest: reduce nagging (#134)

    Signed-off-by: William Woodruff <william@trailofbits.com>
    woodruffw authored Jun 7, 2024
    Configuration menu
    Copy the full SHA
    26de745 View commit details
    Browse the repository at this point in the history

Commits on Jun 17, 2024

  1. requirements: sigstore ~3.0 (#140)

    * requirements: sigstore ~3.0
    
    Signed-off-by: William Woodruff <william@trailofbits.com>
    
    * selftest: update filenames
    
    Signed-off-by: William Woodruff <william@trailofbits.com>
    
    * action: update another path
    
    Signed-off-by: William Woodruff <william@trailofbits.com>
    
    * action: remove deprecated settings
    
    Signed-off-by: William Woodruff <william@trailofbits.com>
    
    * README: remove old docs
    
    Signed-off-by: William Woodruff <william@trailofbits.com>
    
    ---------
    
    Signed-off-by: William Woodruff <william@trailofbits.com>
    woodruffw authored Jun 17, 2024
    Configuration menu
    Copy the full SHA
    9466100 View commit details
    Browse the repository at this point in the history

Commits on Jul 4, 2024

  1. action: use a venv to prevent PEP 668 errors (#145)

    * action: use a venv to prevent PEP 668 errors
    
    Signed-off-by: William Woodruff <william@trailofbits.com>
    
    * action: use sys.executable
    
    Signed-off-by: William Woodruff <william@trailofbits.com>
    
    * fight with Windows
    
    Signed-off-by: William Woodruff <william@trailofbits.com>
    
    * setup: minimum Python is 3.8
    
    This has been true for a while.
    
    Signed-off-by: William Woodruff <william@trailofbits.com>
    
    ---------
    
    Signed-off-by: William Woodruff <william@trailofbits.com>
    woodruffw authored Jul 4, 2024
    Configuration menu
    Copy the full SHA
    1ddeb82 View commit details
    Browse the repository at this point in the history

Commits on Jul 8, 2024

  1. action: flip release-signing-artifacts (#142)

    Signed-off-by: William Woodruff <william@trailofbits.com>
    woodruffw authored Jul 8, 2024
    Configuration menu
    Copy the full SHA
    16fbe9a View commit details
    Browse the repository at this point in the history

Commits on Jul 9, 2024

  1. action: remove old output settings (#146)

    * action: remove old output settings
    
    Signed-off-by: William Woodruff <william@trailofbits.com>
    
    * selftest: remove old test ref
    
    Signed-off-by: William Woodruff <william@trailofbits.com>
    
    ---------
    
    Signed-off-by: William Woodruff <william@trailofbits.com>
    woodruffw authored Jul 9, 2024
    Configuration menu
    Copy the full SHA
    551a497 View commit details
    Browse the repository at this point in the history
  2. Cleanup workflows (#148)

    * Workflows: remove default input arg from action call
    
    Signed-off-by: Jussi Kukkonen <jkukkonen@google.com>
    
    * workflows: Remove unnecessary selftest
    
    release-signing-artifacts defaults to "true" so the removed test now
    duplicates the previous test.
    
    We could try testing the release-signing-artifacts == "false" but that's
    a bit trickier since it could only be done in a release event...
    
    Signed-off-by: Jussi Kukkonen <jkukkonen@google.com>
    
    * workflows: Drop recently removed job from needs-list
    
    Signed-off-by: Jussi Kukkonen <jkukkonen@google.com>
    
    ---------
    
    Signed-off-by: Jussi Kukkonen <jkukkonen@google.com>
    jku authored Jul 9, 2024
    Configuration menu
    Copy the full SHA
    da238ad View commit details
    Browse the repository at this point in the history

Commits on Jul 15, 2024

  1. Prep 3.0.0 (#143)

    woodruffw authored Jul 15, 2024
    Configuration menu
    Copy the full SHA
    f514d46 View commit details
    Browse the repository at this point in the history
Loading
0