Thanks to visit codestin.com
Credit goes to github.com

Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: cli/cli
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v2.50.0
Choose a base ref
...
head repository: cli/cli
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v2.51.0
Choose a head ref
  • 18 commits
  • 15 files changed
  • 9 contributors

Commits on May 29, 2024

  1. Ensure signed RPMs have attestations 

    Thanks to @malancas for highlighting issue ordering of RPM signing and attestations!  Now, all artifacts should have attestations appropriately generated
    @andyfeller
    andyfeller authored May 29, 2024
    Configuration menu
    Copy the full SHA
    fe880a3 View commit details
    Browse the repository at this point in the history

Commits on May 30, 2024

  1. Merge pull request #9143 from cli/andyfeller-patch-1 

    Ensure signed RPMs have attestations
    @williammartin
    williammartin authored May 30, 2024
    Configuration menu
    Copy the full SHA
    22991ab View commit details
    Browse the repository at this point in the history

  2. Add signer-repo and signer-workflow flags to `gh attestation veri… 

    …fy` (#9137)

* add signer-repo and signer-workflow flags

Signed-off-by: Meredith Lancaster <[email protected]>

* add check for SignerRepo option

Signed-off-by: Meredith Lancaster <[email protected]>

* add helper function and comment for clarity

Signed-off-by: Meredith Lancaster <[email protected]>

* update flag comment

Signed-off-by: Meredith Lancaster <[email protected]>

* reference correct field

Signed-off-by: Meredith Lancaster <[email protected]>

* move function to more relevant file

Signed-off-by: Meredith Lancaster <[email protected]>

* Update pkg/cmd/attestation/verify/verify.go

Co-authored-by: Zach Steindler <[email protected]>

* Update pkg/cmd/attestation/verify/verify.go

Co-authored-by: Zach Steindler <[email protected]>

* make all reusable workflow flags mutually exclusive

Signed-off-by: Meredith Lancaster <[email protected]>

* accept signer workflow without host

Signed-off-by: Meredith Lancaster <[email protected]>

* support client optionally providing host with signer workflow flag

Signed-off-by: Meredith Lancaster <[email protected]>

* comment

Signed-off-by: Meredith Lancaster <[email protected]>

* add tests for parsing signer workflow

Signed-off-by: Meredith Lancaster <[email protected]>

---------

Signed-off-by: Meredith Lancaster <[email protected]>
Co-authored-by: Zach Steindler <[email protected]>
    @malancas @steiza
    malancas and steiza authored May 30, 2024
    Configuration menu
    Copy the full SHA
    cd5562f View commit details
    Browse the repository at this point in the history

  3. Specify rpm repository to avoid conflicts with community repositories

    @hbenali
    hbenali authored May 30, 2024
    Configuration menu
    Copy the full SHA
    fc8b86b View commit details
    Browse the repository at this point in the history

  4. Merge pull request #9151 from hbenali/fix-fedora 

    Docs: Specify rpm repository to avoid conflicts with community repositories
    @andyfeller
    andyfeller authored May 30, 2024
    Configuration menu
    Copy the full SHA
    31a9d08 View commit details
    Browse the repository at this point in the history

Commits on Jun 4, 2024

  1. build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0 

    Bumps [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) from 1.1.2 to 1.2.0.
- [Release notes](https://github.com/actions/attest-build-provenance/releases)
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md)
- [Commits](actions/attest-build-provenance@173725a...49df96e)

---
updated-dependencies:
- dependency-name: actions/attest-build-provenance
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
    @dependabot
    dependabot[bot] authored Jun 4, 2024
    Configuration menu
    Copy the full SHA
    215456e View commit details
    Browse the repository at this point in the history

  2. replaced deprecated --json-result flag with --format=json in the gh a… 

    …t docstring.
    @phillmv
    phillmv committed Jun 4, 2024
    Configuration menu
    Copy the full SHA
    e8a13cf View commit details
    Browse the repository at this point in the history

  3. Merge pull request #9172 from cli/phillmv/fix-small-verify-flag-bug 

    Replace `--json-result` flag with `--format=json` in the attestation cmd
    @phillmv
    phillmv authored Jun 4, 2024
    Configuration menu
    Copy the full SHA
    58b459f View commit details
    Browse the repository at this point in the history

Commits on Jun 5, 2024

  1. build(deps): bump goreleaser/goreleaser-action from 5 to 6 

    Bumps [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) from 5 to 6.
- [Release notes](https://github.com/goreleaser/goreleaser-action/releases)
- [Commits](goreleaser/goreleaser-action@v5...v6)

---
updated-dependencies:
- dependency-name: goreleaser/goreleaser-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
    @dependabot
    dependabot[bot] authored Jun 5, 2024
    Configuration menu
    Copy the full SHA
    d666248 View commit details
    Browse the repository at this point in the history

Commits on Jun 7, 2024

  1. Bump go-keyring to fix keepassxc prompt confirmation

    @AlanD20
    AlanD20 committed Jun 7, 2024
    Configuration menu
    Copy the full SHA
    e91860d View commit details
    Browse the repository at this point in the history

  2. Merge pull request #9179 from AlanD20/bump-go-keyring 

    Bump go-keyring to fix keepassxc prompt confirmation
    @williammartin
    williammartin authored Jun 7, 2024
    Configuration menu
    Copy the full SHA
    6f558c9 View commit details
    Browse the repository at this point in the history

Commits on Jun 10, 2024

  1. Merge pull request #9169 from cli/dependabot/github_actions/actions/a… 

    …ttest-build-provenance-1.2.0

build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0
    @williammartin
    williammartin authored Jun 10, 2024
    Configuration menu
    Copy the full SHA
    e36d8f1 View commit details
    Browse the repository at this point in the history

  2. build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.2 

    Bumps [github.com/gorilla/websocket](https://github.com/gorilla/websocket) from 1.5.1 to 1.5.2.
- [Release notes](https://github.com/gorilla/websocket/releases)
- [Commits](gorilla/websocket@v1.5.1...v1.5.2)

---
updated-dependencies:
- dependency-name: github.com/gorilla/websocket
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
    @dependabot
    dependabot[bot] authored Jun 10, 2024
    Configuration menu
    Copy the full SHA
    1a470b3 View commit details
    Browse the repository at this point in the history

Commits on Jun 11, 2024

  1. build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2 

    Bumps google.golang.org/protobuf from 1.34.1 to 1.34.2.

---
updated-dependencies:
- dependency-name: google.golang.org/protobuf
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
    @dependabot
    dependabot[bot] authored Jun 11, 2024
    Configuration menu
    Copy the full SHA
    945b668 View commit details
    Browse the repository at this point in the history

Commits on Jun 12, 2024

  1. Merge pull request #9175 from cli/dependabot/github_actions/gorelease… 

    …r/goreleaser-action-6

build(deps): bump goreleaser/goreleaser-action from 5 to 6
    @andyfeller
    andyfeller authored Jun 12, 2024
    Configuration menu
    Copy the full SHA
    7cd4a15 View commit details
    Browse the repository at this point in the history

  2. Merge pull request #9192 from cli/dependabot/go_modules/github.com/go… 

    …rilla/websocket-1.5.2

build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.2
    @andyfeller
    andyfeller authored Jun 12, 2024
    Configuration menu
    Copy the full SHA
    7d36c2d View commit details
    Browse the repository at this point in the history

  3. Merge pull request #9197 from cli/dependabot/go_modules/google.golang… 

    ….org/protobuf-1.34.2

build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2
    @andyfeller
    andyfeller authored Jun 12, 2024
    Configuration menu
    Copy the full SHA
    04d0ec0 View commit details
    Browse the repository at this point in the history

Commits on Jun 13, 2024

  1. Gracefully degrade when fetching annotations fails due to 403 (#9113) 

    Co-authored-by: William Martin <[email protected]>
    @wingleung @williammartin
    wingleung and williammartin authored Jun 13, 2024
    Configuration menu
    Copy the full SHA
    f647131 View commit details
    Browse the repository at this point in the history
Loading