chore(deps): update dependency sigstore/cosign to v2.6.3 #139

Merged

CSRBot merged 1 commits from renovate/sigstore-cosign-2.x into master 2026-04-14 14:48:48 +02:00

Conversation 0 Commits 1 Files Changed 1

+1 -1

CSRBot commented 2026-04-14 13:22:48 +02:00

Collaborator

Copy Link

Copy Source

This PR contains the following updates:

Package	Update	Change
sigstore/cosign	patch	v2.6.2 -> v2.6.3

---

⚠️ Warning

Some dependencies could not be looked up. Check the warning logs for more information.

---

Release Notes

sigstore/cosign (sigstore/cosign)

v2.6.3

Compare Source

Changelog

v2.6.3 resolves GHSA-w6c6-c85g-mmv6.

• fecddd3 Fix DSSE predicate check (#​4802)
• 564c5b1 Backport bundle detection to sign and attest (#​4727)

Thanks to all contributors!

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [sigstore/cosign](https://github.com/sigstore/cosign) | patch | `v2.6.2` -> `v2.6.3` | --- > ⚠️ **Warning** > > Some dependencies could not be looked up. Check the warning logs for more information. --- ### Release Notes <details> <summary>sigstore/cosign (sigstore/cosign)</summary> ### [`v2.6.3`](https://github.com/sigstore/cosign/releases/tag/v2.6.3) [Compare Source](https://github.com/sigstore/cosign/compare/v2.6.2...v2.6.3) #### Changelog v2.6.3 resolves [GHSA-w6c6-c85g-mmv6](https://github.com/sigstore/cosign/security/advisories/GHSA-w6c6-c85g-mmv6). - [`fecddd3`](https://github.com/sigstore/cosign/commit/fecddd3c22045a39f52392e71e79f66854b41352) Fix DSSE predicate check ([#&#8203;4802](https://github.com/sigstore/cosign/issues/4802)) - [`564c5b1`](https://github.com/sigstore/cosign/commit/564c5b1b0bed7bd991910774c47df1150ffb8aa8) Backport bundle detection to sign and attest ([#&#8203;4727](https://github.com/sigstore/cosign/issues/4727)) ##### Thanks to all contributors! </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xNDAuMSIsInVwZGF0ZWRJblZlciI6IjQxLjE0MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbInJlbm92YXRlL2F1dG9tZXJnZSIsInJlbm92YXRlL2dpdGh1Yi1hY3Rpb24iXX0=-->

CSRBot added 1 commit 2026-04-14 13:22:48 +02:00

chore(deps): update dependency sigstore/cosign to v2.6.3 51eed9551e

CSRBot requested review from volker.raschek 2026-04-14 13:22:49 +02:00

CSRBot scheduled this pull request to auto merge when all checks succeed 2026-04-14 13:22:51 +02:00

CSRBot merged commit ca601f58ce into master 2026-04-14 14:48:48 +02:00

CSRBot deleted branch renovate/sigstore-cosign-2.x 2026-04-14 14:48:49 +02:00

CSRBot referenced this issue from a commit 2026-04-14 14:48:51 +02:00

Merge pull request 'chore(deps): update dependency sigstore/cosign to v2.6.3' (#139) from renovate/sigstore-cosign-2.x into master

Sign in to join this conversation.

Reviewers

No Reviewers

volker.raschek

Labels

No items

No labels

Milestone

No items

No Milestone

Projects

Clear projects

No projects

Assignees

Clear assignees

CSRBot (CSRBot) volker.raschek (Markus Pesch)

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: volker.raschek/prometheus-postgres-exporter#139