From 3cf2dc3b423f20d6cb88fde1c6060fda7761df5d Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 19 Oct 2026 08:21:39 +0000 Subject: [PATCH 1/2] chore(deps): bump devantler-tech/.github/.github/workflows/publish-manifests.yaml Bumps [devantler-tech/.github/.github/workflows/publish-manifests.yaml](https://github.com/devantler-tech/.github) from 7.12.0 to 7.16.2. - [Release notes](https://github.com/devantler-tech/.github/releases) - [Commits](https://github.com/devantler-tech/.github/compare/e1681322e671f8e277c5e230a57fe66cdf1a612d...8d2203af130a8c27b8b98b3d7146f76b5ade7a98) --- updated-dependencies: - dependency-name: devantler-tech/.github/.github/workflows/publish-manifests.yaml dependency-version: 7.16.2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- .github/workflows/cd.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/cd.yaml b/.github/workflows/cd.yaml index de30919b..e760fc97 100644 --- a/.github/workflows/cd.yaml +++ b/.github/workflows/cd.yaml @@ -38,7 +38,7 @@ jobs: # ecosystem, no cooldown for devantler-tech/*). # Keep the ref a 40-hex commit: it is part of the cosign subject the platform # verifies, so its shape is load-bearing here. - uses: devantler-tech/.github/.github/workflows/publish-manifests.yaml@e1681322e671f8e277c5e230a57fe66cdf1a612d # v7.12.0 + uses: devantler-tech/.github/.github/workflows/publish-manifests.yaml@8d2203af130a8c27b8b98b3d7146f76b5ade7a98 # v7.16.2 with: oci-name: devantler-tech/github-config # Without this, a ref the platform verifier does not accept fails nothing From 3868e643b9b9ab131ca17801b528bdd1b07351f9 Mon Sep 17 00:00:00 2001 From: Nikolai Emil Damm Date: Mon, 19 Oct 2026 10:42:37 +0200 Subject: [PATCH 2/2] test(deps): align publisher guard with catalogue v7.16.2 Signed-off-by: Nikolai Emil Damm --- .github/tests/test-publish-manifests-promotion.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/tests/test-publish-manifests-promotion.sh b/.github/tests/test-publish-manifests-promotion.sh index bd988e61..2c25335d 100644 --- a/.github/tests/test-publish-manifests-promotion.sh +++ b/.github/tests/test-publish-manifests-promotion.sh @@ -6,7 +6,7 @@ set -euo pipefail validate_caller() { yq -e ' (.jobs["publish-manifests"].uses == - "devantler-tech/.github/.github/workflows/publish-manifests.yaml@e1681322e671f8e277c5e230a57fe66cdf1a612d") and + "devantler-tech/.github/.github/workflows/publish-manifests.yaml@8d2203af130a8c27b8b98b3d7146f76b5ade7a98") and (.jobs["publish-manifests"].with["enable-caller-pin"] == true) and (.jobs["publish-manifests"].with["enable-signed-promotion"] == true) and (.jobs["publish-manifests"].with["oci-name"] == "devantler-tech/github-config")