elastic / cloudbeat / 24788599542

76%

main: 76%

push

github

chore(deps): update module github.com/sigstore/cosign/v2 to v3 (9.4) (#4780)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[github.com/sigstore/cosign/v2](https://redirect.github.com/sigstore/cosign)
| indirect | major | `v2.6.3` -> `v3.0.6` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>sigstore/cosign (github.com/sigstore/cosign/v2)</summary>

###
[`v3.0.6`](https://redirect.github.com/sigstore/cosign/releases/tag/v3.0.6)

[Compare
Source](https://redirect.github.com/sigstore/cosign/compare/v3.0.5...v3.0.6)

#### Changelog

v3.0.6 resolves
[GHSA-w6c6-c85g-mmv6](https://redirect.github.com/sigstore/cosign/security/advisories/GHSA-w6c6-c85g-mmv6).
This release also adds support for signing with OpenBao-managed keys.

-
[`f1ad3ee`](https://redirect.github.com/sigstore/cosign/commit/f1ad3ee95)
Fix DSSE predicate check (GHSA-w6c6-c85g-mmv6)
([#&#8203;4801](https://redirect.github.com/sigstore/cosign/issues/4801))
-
[`a09afa9`](https://redirect.github.com/sigstore/cosign/commit/a09afa974)
Handle whitespace-only certificate annotation
([#&#8203;4760](https://redirect.github.com/sigstore/cosign/issues/4760))
-
[`5a38a6d`](https://redirect.github.com/sigstore/cosign/commit/5a38a6d33)
fix(sign): closing SignerVerifier too early when signing with a security
key
([#&#8203;4761](https://redirect.github.com/sigstore/cosign/issues/4761))
-
[`2290a59`](https://redirect.github.com/sigstore/cosign/commit/2290a593c)
Disallow --new-bundle-format and --rfc3161-timestamp
([#&#8203;4762](https://redirect.github.com/sigstore/cosign/issues/4762))
-
[`36f4008`](https://redirect.github.com/sigstore/cosign/commit/36f40082f)
support managed keys in conformance ... (continued)

1 of 1 new or added line in 1 file covered. (100.0%)

9727 of 12830 relevant lines covered (75.81%)

16.41 hits per line