From 1a01386e82d5c99adb7741636cd5a3209e92a504 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 29 Oct 2024 15:30:02 -0700
Subject: [PATCH] Bump crazy-max/ghaction-import-gpg from 6.1.0 to 6.2.0 (#399)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Bumps
[crazy-max/ghaction-import-gpg](https://github.com/crazy-max/ghaction-import-gpg)
from 6.1.0 to 6.2.0.
Release notes
Sourced from crazy-max/ghaction-import-gpg's
releases.
v6.2.0
Full Changelog: https://github.com/crazy-max/ghaction-import-gpg/compare/v6.1.0...v6.2.0
Commits
cb9bde2
Merge pull request #205
from crazy-max/dependabot/npm_and_yarn/openpgp-5.11.2652ac61
chore: update generated content0404dfd
build(deps): bump openpgp from 5.11.0 to 5.11.263a9470
Merge pull request #209
from crazy-max/dependabot/npm_and_yarn/actions/core-1...e3a6456
chore: update generated contentf0d6155
Merge pull request #207
from crazy-max/dependabot/npm_and_yarn/micromatch-4.0.88812250
build(deps): bump @​actions/core from 1.10.1 to 1.11.135465df
build(deps): bump micromatch from 4.0.4 to 4.0.8ea88154
Merge pull request #204
from crazy-max/dependabot/github_actions/docker/bake-...871d8a5
build(deps): bump docker/bake-action from 4 to 5- Additional commits viewable in compare
view
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
Signed-off-by: dependabot[bot]
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
.github/workflows/release.yml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 7e5ae9c..02a3c6f 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -35,7 +35,7 @@ jobs:
token:chainguard-github-secrets/terraform-provider-apko-signing-key
- id: import_gpg
- uses: crazy-max/ghaction-import-gpg@01dd5d3ca463c7f10f7f4f7b4f177225ac661ee4 # v6.1.0
+ uses: crazy-max/ghaction-import-gpg@cb9bde2e2525e640591a934b1fd28eef1dcaf5e5 # v6.2.0
with:
gpg_private_key: ${{ steps.secrets.outputs.token }}