fix(deps): update go

[renovate-bot]

This PR contains the following updates:

Package	Type	Update	Change
github.com/sigstore/cosign/v2	require	minor	v2.1.1 -> v2.2.0
github.com/sigstore/rekor	require	minor	v1.2.2-0.20230530122220-67cc9e58bd23 -> v1.3.0
github.com/sigstore/sigstore	require	patch	v1.7.1 -> v1.7.3
golang.org/x/oauth2	require	minor	v0.10.0 -> v0.12.0

---

⚠ Dependency Lookup Warnings ⚠

Warnings were logged while processing this repo. Please check the Dependency Dashboard for more information.

---

Release Notes

sigstore/cosign (github.com/sigstore/cosign/v2)

v2.2.0

Compare Source

Enhancements

• switch to uploading DSSE types to rekor instead of intoto (#​3113)
• add 'cosign sign' command-line parameters for mTLS (#​3052)
• improve error messages around bundle != payload hash (#​3146)
• make VerifyImageAttestation function public (#​3156)
• Switch to cryptoutils function for SANS (#​3185)
• Handle HTTP_1_1_REQUIRED errors in github provider (#​3172)

Bug Fixes

• Fix nondeterminsitic timestamps (#​3121)

Documentation

• doc: Add example of sign-blob with key in env var (#​3152)
• add deprecation notice for cosign-releases GCS bucket (#​3148)
• update doc links (#​3186)

Others

• Upgrade to go1.21 (#​3188)
• Updates ci tests (#​3142)
• test using latest release of scaffolding (#​3187)
• ci: free up disk space for the gh runner (#​3169)
• update go-github to v53 (#​3116)
• call e2e test for cosign attach (#​3112)
• bump build cross to use go1.20.6 and cosign image to 2.1.1 (#​3108)

Contributors

• Bob Callaway
• Carlos Tadeu Panato Junior
• Dmitry Savintsev
• Hayden B
• Hector Fernandez
• Jason Hall
• Jon Johnson
• Jubril Oyetunji
• Paulo Gomes
• Priya Wadhwa
• 张志强

sigstore/rekor (github.com/sigstore/rekor)

v1.3.0

Compare Source

New Features

• feat: Support publishing new log entries to Pub/Sub topics (#​1580)
• Change values of Identity.Raw, add fingerprints (#​1628)
• Extract all subjects from SANs for x509 verifier (#​1632)
• Fix type comment for Identity struct (#​1619)
• Refactor Identities API (#​1611)
• Refactor Verifiers to return multiple keys (#​1601)

Quality Enhancements

• set min go version to 1.21 (#​1651)
• Upgrade to go1.21 (#​1636)

Bug Fixes

• Update openapi.yaml (#​1655)
• pass transient errors through retrieveLogEntry (#​1653)
• return full entryID on HTTP 409 responses (#​1650)
• Update checkpoint link (#​1597)
• Use correct log index in inclusion proof (#​1599)
• remove instrumentation library (#​1595)
• pki: clean up fuzzer (#​1594)
• alpine: add max metadata size to fuzzer (#​1571)

Contributors

• AdamKorcz
• Appu
• Bob Callaway
• Carlos Tadeu Panato Junior
• Ceridwen Coghlan
• Hayden B
• James Alseth

sigstore/sigstore (github.com/sigstore/sigstore)

v1.7.3

Compare Source

What's Changed

• chore: update go-containerregistry by @​k4leung4 in https://github.com/sigstore/sigstore/pull/1318
• fix(azure): RS512 should be used when key size is 512 by @​shaneing in https://github.com/sigstore/sigstore/pull/1331
• Add VerifySignature integration test and cleanup other tests and print statements by @​malancas in https://github.com/sigstore/sigstore/pull/1369

New Contributors

• @​shaneing made their first contribution in https://github.com/sigstore/sigstore/pull/1331

Full Changelog: sigstore/sigstore@v1.7.2...v1.7.3

v1.7.2

Compare Source

What's Changed

• fix race condition in unit test by @​bobcallaway in https://github.com/sigstore/sigstore/pull/1263
• Specify hashes when comparing target meta. by @​kommendorkapten in https://github.com/sigstore/sigstore/pull/1247
• hide warning from setup-gcloud by @​bobcallaway in https://github.com/sigstore/sigstore/pull/1264
• Add support for additional Azure clouds (bug fix), add optional integration test by @​malancas in https://github.com/sigstore/sigstore/pull/1272
• Bump TUF root version by @​haydentherapper in https://github.com/sigstore/sigstore/pull/1312

Full Changelog: sigstore/sigstore@v1.7.1...v1.7.2

---

Configuration

📅 Schedule: Branch creation - "every weekend" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.