Update go modules (release-v0.7) (patch)

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
github.com/enterprise-contract/enterprise-contract-controller/api	v0.1.257 → v0.1.281
github.com/sigstore/cosign/v2	v2.4.1 → v2.4.3
github.com/sigstore/sigstore	v1.9.1 → v1.9.5
k8s.io/api	v0.34.3 → v0.34.4
k8s.io/apiextensions-apiserver	v0.34.3 → v0.34.4
k8s.io/apimachinery	v0.34.3 → v0.34.4
k8s.io/client-go	v0.34.3 → v0.34.4
k8s.io/kubernetes	v1.34.3 → v1.34.4

---

Release Notes

sigstore/cosign (github.com/sigstore/cosign/v2)

v2.4.3

Compare Source

Features

• Bump sigstore/sigstore to support KMS plugins (#​4073)
• Enable fetching signatures without remote get. (#​4047)
• Feat/file flag completion improvements (#​4028)
• Update builder to use go1.23.6 (#​4052)

Bug Fixes

• fix parsing error in --only for cosign copy (#​4049)

Cleanup

• Refactor verifyNewBundle into library function (#​4013)
• fix comment typo and imports order (#​4061)
• sync comment with parameter name in function signature (#​4063)
• sort properly Go imports (#​4071)

Contributors

• Bob Callaway
• Carlos Tadeu Panato Junior
• Cody Soyland
• Dmitry Savintsev
• Hayden B
• Tomasz Janiszewski
• Ville Skyttä

v2.4.2

Compare Source

Features

• Updated open-policy-agent to 1.1.0 library (#​4036)
  • Note that only Rego v0 policies are supported at this time
• Add UseSignedTimestamps to CheckOpts, refactor TSA options (#​4006)
• Add support for verifying root checksum in cosign initialize (#​3953)
• Detect if user supplied a valid protobuf bundle (#​3931)
• Add a log message if user doesn't provide --trusted-root (#​3933)
• Support mTLS towards container registry (#​3922)
• Add bundle create helper command (#​3901)
• Add trusted-root create helper command (#​3876)

Bug Fixes

• fix: set tls config while retaining other fields from default http transport (#​4007)
• policy fuzzer: ignore known panics (#​3993)
• Fix for multiple WithRemote options (#​3982)
• Add nightly conformance test workflow (#​3979)
• Fix copy --only for signatures + update/align docs (#​3904)

Documentation

• Remove usage.md from spec, point to client spec (#​3918)
• move reference from gcr to ghcr (#​3897)

Contributors

• AdamKorcz
• Aditya Sirish
• Bob Callaway
• Carlos Tadeu Panato Junior
• Cody Soyland
• Colleen Murphy
• Hayden B
• Jussi Kukkonen
• Marco Franssen
• Nianyu Shen
• Slavek Kabrda
• Søren Juul
• Warren Hodgkinson
• Zach Steindler

sigstore/sigstore (github.com/sigstore/sigstore)

v1.9.5

Compare Source

What's Changed

• Add context from opts to Azure signer in #​2070
• add RWMutex around providerMap to protect concurrent ops in #​2077

Full Changelog: sigstore/sigstore@v1.9.4...v1.9.5

v1.9.4

Compare Source

What's Changed

• Add a Name field to the TargetFile struct in #​2068
• Update to use Tink v2.3.0 API in #​2069

Full Changelog: sigstore/sigstore@v1.9.3...v1.9.4

v1.9.3

Compare Source

What's Changed

• add proto hash algorithm to registry by @​loosebazooka in #​2048

New Contributors

• @​loosebazooka made their first contribution in #​2048

Full Changelog: sigstore/sigstore@v1.9.2...v1.9.3

v1.9.2

Compare Source

What's Changed

• Add tink package by @​cmurphy in #​2024
• pkg/signature: add P384/P521 compatibility algo to algorithm registry by @​ret2libc in #​2037

New Contributors

• @​cmurphy made their first contribution in #​2024

Full Changelog: sigstore/sigstore@v1.9.1...v1.9.2

kubernetes/api (k8s.io/api)

v0.34.4

Compare Source

kubernetes/apiextensions-apiserver (k8s.io/apiextensions-apiserver)

v0.34.4

Compare Source

kubernetes/apimachinery (k8s.io/apimachinery)

v0.34.4

Compare Source

kubernetes/client-go (k8s.io/client-go)

v0.34.4

Compare Source

kubernetes/kubernetes (k8s.io/kubernetes)

v1.34.4

Compare Source

See kubernetes-announce@. Additional binary downloads are linked in the CHANGELOG.

See the CHANGELOG for more details.

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Artifact update notice

File name: acceptance/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 7 additional dependencies were updated

Details:

Package	Change
cuelang.org/go	v0.11.2 -> v0.12.0
github.com/Azure/go-ansiterm	v0.0.0-20230124172434-306776ec8161 -> v0.0.0-20250102033503-faa5f7b0171c
github.com/google/certificate-transparency-go	v1.2.1 -> v1.3.1
github.com/magiconair/properties	v1.8.7 -> v1.8.9
github.com/mitchellh/mapstructure	v1.5.0 -> v1.5.1-0.20231216201459-8508981c8b6c
github.com/moby/term	v0.5.0 -> v0.5.2
github.com/sigstore/timestamp-authority	v1.2.2 -> v1.2.4

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 12 additional dependencies were updated

Details:

Package	Change
github.com/Azure/go-ansiterm	v0.0.0-20230124172434-306776ec8161 -> v0.0.0-20250102033503-faa5f7b0171c
github.com/aws/aws-sdk-go-v2/service/ecr	v1.32.2 -> v1.40.3
github.com/aws/aws-sdk-go-v2/service/ecrpublic	v1.25.4 -> v1.31.2
github.com/awslabs/amazon-ecr-credential-helper/ecr-login	v0.0.0-20240826150212-5dc58b6e29f8 -> v0.9.1
github.com/coreos/go-oidc/v3	v3.12.0 -> v3.14.1
github.com/google/certificate-transparency-go	v1.2.1 -> v1.3.1
github.com/mitchellh/mapstructure	v1.5.0 -> v1.5.1-0.20231216201459-8508981c8b6c
github.com/moby/term	v0.5.0 -> v0.5.2
github.com/sigstore/fulcio	v1.6.3 -> v1.6.6
github.com/sigstore/timestamp-authority	v1.2.2 -> v1.2.4
k8s.io/api	v0.34.3 -> v0.34.4
sigs.k8s.io/release-utils	v0.8.4 -> v0.11.0