chore(deps): update sigstore (9.4)

[elastic-renovate-prod]

This PR contains the following updates:

Package	Type	Update	Change
github.com/sigstore/rekor-tiles/v2	indirect	minor	v2.0.1 -> v2.2.1
github.com/sigstore/timestamp-authority/v2	indirect	patch	v2.0.3 -> v2.0.6

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

sigstore/rekor-tiles (github.com/sigstore/rekor-tiles/v2)

v2.2.1

Compare Source

What's Changed

This release includes a fix to prevent large leaf entries from corrupting the log. We recommend updating ASAP.

• Bump Tessera to v1.0.2 in https://github.com/sigstore/rekor-tiles/pull/691
• Apply reasonable signature and verifiers limits to DSSE requests in https://github.com/sigstore/rekor-tiles/pull/684

Full Changelog: sigstore/rekor-tiles@v2.2.0...v2.2.1

v2.2.0

Compare Source

What's Changed

This release adds support for logs deployed on AWS and an alternative storage backend for GCP that uses CloudSQL for sequencing entries rather than Spanner.

• Add AWS storage backend by @​Hayden-IO in https://github.com/sigstore/rekor-tiles/pull/660
• Add support for GCP CloudSQL+GCS storage backend by @​Hayden-IO in https://github.com/sigstore/rekor-tiles/pull/676
• Remove SHARDING.md by @​cmurphy in https://github.com/sigstore/rekor-tiles/pull/670

Full Changelog: sigstore/rekor-tiles@v2.1.0...v2.2.0

v2.1.0

Compare Source

What's Changed

• Add prober test instructions to sharding playbook by @​aaronlew02 in https://github.com/sigstore/rekor-tiles/pull/583
• Include log index as response header when duplicate is detected by @​Hayden-IO in https://github.com/sigstore/rekor-tiles/pull/621
• Add support for a custom TLS config for clients by @​cmurphy in https://github.com/sigstore/rekor-tiles/pull/640
• Add storage backend abstraction to support more backends by @​Hayden-IO in https://github.com/sigstore/rekor-tiles/pull/630
• Add instructions for adding a new storage backend by @​Hayden-IO in https://github.com/sigstore/rekor-tiles/pull/643
• Move signerverifier to backend-specific package by @​Hayden-IO in https://github.com/sigstore/rekor-tiles/pull/647
• Implement POSIX storage backend by @​Hayden-IO in https://github.com/sigstore/rekor-tiles/pull/644

Full Changelog: sigstore/rekor-tiles@v2.0.1...v2.1.0

sigstore/timestamp-authority (github.com/sigstore/timestamp-authority/v2)

v2.0.6

Compare Source

What's Changed

• Ensure correct certificate is used for TSA auth checks (GHSA-xm5m-wgh2-rrg3) by @​jku in https://github.com/sigstore/timestamp-authority/pull/1333

Full Changelog: sigstore/timestamp-authority@v2.0.5...v2.0.6

v2.0.5

Compare Source

This release updates the chi middleware to resolve a panic.

Bug Fixes

• Upgrade chi middleware v4 -> v5 (#​1307)

Docs

• Update the semantics of the NTP monitoring so its clear in the README (#​1276)
• docs: note that CRL/OCSP checks are not performed (#​1277)

Misc

• Increase default HTTP idle timeout (#​1287)

v2.0.4

Compare Source

Only contains dependency updates, but fixes #​1252 due to breaking API change in sigstore/sigstore

---

Configuration

📅 Schedule: Branch creation - "* 1 * * 1-5" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.