Skip to content

[pull] master from aio-libs:master#621

Merged
pull[bot] merged 1 commit into
tj-python:masterfrom
aio-libs:master
Jun 11, 2026
Merged

[pull] master from aio-libs:master#621
pull[bot] merged 1 commit into
tj-python:masterfrom
aio-libs:master

Conversation

@pull

@pull pull Bot commented Jun 11, 2026

Copy link
Copy Markdown

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

Bumps
[sigstore/gh-action-sigstore-python](https://github.com/sigstore/gh-action-sigstore-python)
from 3.3.0 to 3.4.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/sigstore/gh-action-sigstore-python/releases">sigstore/gh-action-sigstore-python's
releases</a>.</em></p>
<blockquote>
<h2>v3.4.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Used <a
href="https://github.com/sigstore/sigstore-python">sigstore</a> package
version is now 4.3.0</li>
<li>Other dependency updates</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/sigstore/gh-action-sigstore-python/compare/v3.3.0...v3.4.0">https://github.com/sigstore/gh-action-sigstore-python/compare/v3.3.0...v3.4.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/sigstore/gh-action-sigstore-python/commit/5b79a39c381910c090341a2c9b0bf022c8b387e1"><code>5b79a39</code></a>
build(deps): bump sigstore in the python-dependencies group (<a
href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/408">#408</a>)</li>
<li><a
href="https://github.com/sigstore/gh-action-sigstore-python/commit/3d7f17b8b279a1d7ab50eb95c5093a705faa268c"><code>3d7f17b</code></a>
build(deps): bump idna in the python-dependencies group (<a
href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/407">#407</a>)</li>
<li><a
href="https://github.com/sigstore/gh-action-sigstore-python/commit/2d128b7818557646bcbf10cbacdb1e853bb219f2"><code>2d128b7</code></a>
build(deps): bump github/codeql-action in the actions group (<a
href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/405">#405</a>)</li>
<li><a
href="https://github.com/sigstore/gh-action-sigstore-python/commit/06882d3fcb29bb3d179477463294949a66a585a3"><code>06882d3</code></a>
build(deps): bump the python-dependencies group with 3 updates (<a
href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/406">#406</a>)</li>
<li><a
href="https://github.com/sigstore/gh-action-sigstore-python/commit/bab6f774fe0bae9a78bb84a7f2dae7eba8c3acb6"><code>bab6f77</code></a>
build(deps): bump the actions group across 1 directory with 3 updates
(<a
href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/403">#403</a>)</li>
<li><a
href="https://github.com/sigstore/gh-action-sigstore-python/commit/f98c4297018863c6a9e0c5b805a3556b077e71f4"><code>f98c429</code></a>
build(deps): bump securesystemslib in the python-dependencies group (<a
href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/404">#404</a>)</li>
<li><a
href="https://github.com/sigstore/gh-action-sigstore-python/commit/db9196e5f4691f5b56529ff81e2ebee29602e955"><code>db9196e</code></a>
build(deps): bump the python-dependencies group across 1 directory with
3 upd...</li>
<li><a
href="https://github.com/sigstore/gh-action-sigstore-python/commit/839093df29c9a230f2937675f228721adea13c41"><code>839093d</code></a>
build(deps): bump certifi from 2026.4.22 to 2026.5.20 in the
python-dependenc...</li>
<li><a
href="https://github.com/sigstore/gh-action-sigstore-python/commit/d9df9da0e2490b27cf8083a92277335284adb83f"><code>d9df9da</code></a>
build(deps): bump ast-serialize in the python-dependencies group (<a
href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/397">#397</a>)</li>
<li><a
href="https://github.com/sigstore/gh-action-sigstore-python/commit/2f7a761af4c98ffb7ae55fa917de2cc414a9b681"><code>2f7a761</code></a>
build(deps): bump github/codeql-action in the actions group (<a
href="https://redirect.github.com/sigstore/gh-action-sigstore-python/issues/395">#395</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/sigstore/gh-action-sigstore-python/compare/v3.3.0...v3.4.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=sigstore/gh-action-sigstore-python&package-manager=github_actions&previous-version=3.3.0&new-version=3.4.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@pull pull Bot locked and limited conversation to collaborators Jun 11, 2026
@pull pull Bot added the ⤵️ pull label Jun 11, 2026
@pull pull Bot merged commit be2107c into tj-python:master Jun 11, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants