Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: sigstore/cosign
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v3.0.1
Choose a base ref
...
head repository: sigstore/cosign
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v3.0.2
Choose a head ref
  • 3 commits
  • 5 files changed
  • 3 contributors

Commits on Oct 9, 2025

  1. Update rekor-tiles version path 

    The rekor-tiles package is starting at version 2.0. There are no
interface changes with this version change.

Signed-off-by: Colleen Murphy <[email protected]>
    @cmurphy
    cmurphy committed Oct 9, 2025
    Configuration menu
    Copy the full SHA
    9fee551 View commit details
    Browse the repository at this point in the history

Commits on Oct 10, 2025

  1. chore(deps): bump github.com/go-jose/go-jose/v4 (#4451) 

    Bumps the gomod group with 1 update in the / directory: [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose).


Updates `github.com/go-jose/go-jose/v4` from 4.1.2 to 4.1.3
- [Release notes](https://github.com/go-jose/go-jose/releases)
- [Commits](go-jose/go-jose@v4.1.2...v4.1.3)

---
updated-dependencies:
- dependency-name: github.com/go-jose/go-jose/v4
  dependency-version: 4.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    @dependabot
    dependabot[bot] authored Oct 10, 2025
    Configuration menu
    Copy the full SHA
    9b10de4 View commit details
    Browse the repository at this point in the history

  2. choose different signature filename for KMS-signed release signatures (… 

    …#4448)

* choose different signature filename for keyless release signatures

Signed-off-by: Bob Callaway <[email protected]>

* switch, rename the kms-signed objects

Signed-off-by: Bob Callaway <[email protected]>

* update README

Signed-off-by: Bob Callaway <[email protected]>

* update README

Signed-off-by: Bob Callaway <[email protected]>

---------

Signed-off-by: Bob Callaway <[email protected]>
    @bobcallaway
    bobcallaway authored Oct 10, 2025
    Configuration menu
    Copy the full SHA
    8444969 View commit details
    Browse the repository at this point in the history
Loading