Commit 5ab3744
committed
feat: Upgrade Sigstore from v2.6.1 to v3.0.2
Upgrade all Sigstore dependencies from v2 to v3.
- Updated imports from cosign/v2 to cosign/v3:
- github.com/sigstore/cosign/v3/cmd/cosign/cli/fulcio
- github.com/sigstore/cosign/v3/cmd/cosign/cli/options
- github.com/sigstore/cosign/v3/pkg/cosign
- Updated import from cosign/v2 to cosign/v3:
- github.com/sigstore/cosign/v3/pkg/providers/all
- Removed: github.com/sigstore/cosign/v2 v2.6.1
- Added: github.com/sigstore/cosign/v3 v3.0.2
Checked entire codebase for v2 references:
```bash
grep -r "sigstore/cosign/v2" --include="*.go" --include="go.mod" --include="go.sum" .
```
This upgrade maintains signature compatibility:
- v3 can verify signatures created with v2 (backward compatible)
- v2 can verify signatures created with v3 (forward compatible)
Verified by compatibility test workflow using pre-signed components.
On-behalf-of: Gerald Morrison (SAP) <gerald.morrison@sap.com>
Signed-off-by: Gerald Morrison (SAP) <gerald.morrison@sap.com>1 parent 6509bcb commit 5ab3744
2 files changed
+4
-4
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
1 | 1 | | |
2 | 2 | | |
3 | 3 | | |
4 | | - | |
| 4 | + | |
5 | 5 | | |
6 | 6 | | |
7 | 7 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
14 | 14 | | |
15 | 15 | | |
16 | 16 | | |
17 | | - | |
18 | | - | |
19 | | - | |
| 17 | + | |
| 18 | + | |
| 19 | + | |
20 | 20 | | |
21 | 21 | | |
22 | 22 | | |
| |||
0 commit comments