-
Notifications
You must be signed in to change notification settings - Fork 86
Pull requests: notaryproject/ratify
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
chore: Bump vulnerable dependencies [GHSA-hrxh-6v49-42gf, GO-2026-5932]
cve
release-1.4
#2793
opened Jul 22, 2026 by
github-actions
Bot
Loading…
chore: Bump github/codeql-action/upload-sarif from 3.28.15 to 4.37.3
dependencies
Pull requests that update a dependency file
v1
#2789
opened Jul 22, 2026 by
dependabot
Bot
Loading…
chore: Bump actions/checkout from 4.2.2 to 7.0.1
dependencies
Pull requests that update a dependency file
v1
#2788
opened Jul 22, 2026 by
dependabot
Bot
Loading…
chore: Bump nick-fields/retry from 3.0.2 to 4.0.0
dependencies
Pull requests that update a dependency file
v1
#2787
opened Jul 22, 2026 by
dependabot
Bot
Loading…
chore: Bump step-security/harden-runner from 2.11.1 to 2.20.0
dependencies
Pull requests that update a dependency file
v1
#2786
opened Jul 22, 2026 by
dependabot
Bot
Loading…
chore: Bump oras-project/setup-oras from 1.2.2 to 2.0.1
dependencies
Pull requests that update a dependency file
v1
#2785
opened Jul 22, 2026 by
dependabot
Bot
Loading…
chore: Bump github/codeql-action/analyze from 4.37.0 to 4.37.3
v2
#2784
opened Jul 22, 2026 by
dependabot
Bot
Loading…
chore: Bump peter-evans/create-pull-request from 7.0.11 to 8.1.1
v2
#2783
opened Jul 22, 2026 by
dependabot
Bot
Loading…
chore: Bump github/codeql-action/init from 4.37.0 to 4.37.3
v2
#2782
opened Jul 22, 2026 by
dependabot
Bot
Loading…
feat: add liveness and readiness probes to gatekeeper provider
v2
#2772
opened Jul 21, 2026 by
charleswool
Contributor
Loading…
feat(cosign): allow key-based verification without a timestamp
#2753
opened Jul 20, 2026 by
charleswool
Contributor
Loading…
chore: Bump github.com/aws/aws-sdk-go-v2/config from 1.32.20 to 1.32.30
dependencies
Pull requests that update a dependency file
#2738
opened Jul 16, 2026 by
dependabot
Bot
Loading…
chore: Bump github.com/aws/aws-sdk-go-v2/credentials from 1.19.28 to 1.19.29
dependencies
Pull requests that update a dependency file
#2737
opened Jul 16, 2026 by
dependabot
Bot
Loading…
chore: Bump oras-project/setup-oras from 2.0.0 to 2.0.1
dependencies
Pull requests that update a dependency file
github_actions
Pull requests that update GitHub Actions code
#2727
opened Jul 13, 2026 by
dependabot
Bot
Loading…
fix(notation): reject leaf cert trust anchors
#2723
opened Jul 11, 2026 by
fseldow
Contributor
Loading…
chore: Bump step-security/harden-runner from 2.10.2 to 2.20.0
dependencies
Pull requests that update a dependency file
#2718
opened Jul 10, 2026 by
dependabot
Bot
Loading…
chore: Bump codecov/codecov-action from 5.1.2 to 7.0.0
dependencies
Pull requests that update a dependency file
#2717
opened Jul 10, 2026 by
dependabot
Bot
Loading…
chore: Bump goreleaser/goreleaser-action from 6.1.0 to 7.2.3
dependencies
Pull requests that update a dependency file
#2716
opened Jul 10, 2026 by
dependabot
Bot
Loading…
chore: Bump github.com/spdx/tools-golang from 0.5.5 to 0.5.7
dependencies
Pull requests that update a dependency file
#2709
opened Jul 9, 2026 by
dependabot
Bot
Loading…
chore: Bump github.com/aws/aws-sdk-go-v2/credentials from 1.19.29 to 1.19.30
dependencies
Pull requests that update a dependency file
go
Pull requests that update Go code
#2705
opened Jul 9, 2026 by
dependabot
Bot
Loading…
chore: Bump github.com/aws/aws-sdk-go-v2 from 1.41.7 to 1.41.12
dependencies
Pull requests that update a dependency file
#2650
opened Jul 2, 2026 by
dependabot
Bot
Loading…
Previous Next
ProTip!
Adding no:label will show everything without a label.