[dependabot]

Bumps pypi-attestations from 0.0.29 to 0.0.31.

Release notes

Sourced from pypi-attestations's releases.

v0.0.31

Changed

• Replaced pyasn1 with cryptography for ASN.1 encoding and decoding, and raised the minimum supported cryptography version to 47.0.0 (#212).

v0.0.30

What's Changed

• Use raw content instead of decoded text for parsing JSON (#171) by @​j0057 in pypi/pypi-attestations#172
• Add circleci to pypi attestations by @​meeech in pypi/pypi-attestations#166
• Update help: PYPI_FILE can be a local file by @​hugovk in pypi/pypi-attestations#185
• Update min sigstore version to 4.5.0 and prep 0.0.30 release by @​facutuesca in pypi/pypi-attestations#199

New Contributors

• @​j0057 made their first contribution in pypi/pypi-attestations#172
• @​meeech made their first contribution in pypi/pypi-attestations#166
• @​hugovk made their first contribution in pypi/pypi-attestations#185

Full Changelog: pypi/pypi-attestations@v0.0.29...v0.0.30

Changelog

Sourced from pypi-attestations's changelog.

[0.0.31]

Changed

• Replaced pyasn1 with cryptography for ASN.1 encoding and decoding, and raised the minimum supported cryptography version to 47.0.0 (#212).

[0.0.30]

Added

• Support for CircleCI attestations (#166). This is work aligned with adding CircleCI as a Trusted Publisher in pypi. (#19349)

Changed

• Updated the minimum supported sigstore dependency to 4.5.

Commits

• bc6dbbe Release 0.0.31 (#213)
• 22a2536 Add make help target (#186)
• e04156a Replace pyasn1 with cryptography ASN.1 support (#212)
• 98c59a8 build(deps): bump zizmorcore/zizmor-action from 0.7.1 to 0.8.0 in the actions...
• 3c35051 build(deps): bump the actions group across 1 directory with 2 updates (#210)
• 945dd53 build(deps): bump zizmorcore/zizmor-action (#208)
• 7abd868 build(deps): bump the actions group with 2 updates (#207)
• 0838c9f build(deps): bump zizmorcore/zizmor-action in the actions group (#206)
• 12aeec3 build(deps): bump the actions group across 1 directory with 2 updates (#205)
• 93404d1 build(deps): bump actions/attest-build-provenance in the actions group (#203)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)