chore(deps): bump github.com/sylabs/sif/v2 from 2.8.1 to 2.17.1

[dependabot[bot]]

Bumps github.com/sylabs/sif/v2 from 2.8.1 to 2.17.1.

Release notes

Sourced from github.com/sylabs/sif/v2's releases.

v2.17.1

What's Changed

• refactor: use DSSE wrappers from sigstore by @​tri-adam in sylabs/sif#366
• ci: add testing against Go 1.23 RC by @​tri-adam in sylabs/sif#368

Full Changelog: https://github.com/sylabs/sif/compare/v2.17.0...v2.17.1

v2.17.0

This release adds support for updating the digest of an OCI blob within a SIF.

Specifically, the following API has been added:

• func (*FileImage) SetOCIBlobDigest: updates the digest of the OCI blob object with id to h, according to opts.

What's Changed

• chore: bump golangci-lint to v1.57 by @​tri-adam in sylabs/sif#357
• build(deps): bump github.com/sigstore/sigstore from 1.8.2 to 1.8.3 by @​dependabot in sylabs/sif#358
• build(deps): bump github.com/sigstore/sigstore from 1.8.3 to 1.8.4 by @​dependabot in sylabs/sif#359
• ci: bump golangci-lint to v1.59 by @​tri-adam in sylabs/sif#360
• ci: update to use goreleaser v2 by @​tri-adam in sylabs/sif#361
• build(deps): bump github.com/google/go-containerregistry from 0.19.1 to 0.19.2 by @​dependabot in sylabs/sif#362
• build(deps): bump github.com/spf13/cobra from 1.8.0 to 1.8.1 by @​dependabot in sylabs/sif#363
• refactor: split add/del/set code into files by @​tri-adam in sylabs/sif#364
• feat: add SetOCIBlobDigest by @​tri-adam in sylabs/sif#365

Full Changelog: https://github.com/sylabs/sif/compare/v2.16.0...v2.17.0

v2.16.0

This release drops support for Go 1.20.

What's Changed

• build(deps): bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3 by @​dependabot in sylabs/sif#355
• build(deps): bump github.com/google/go-containerregistry from 0.19.0 to 0.19.1 by @​dependabot in sylabs/sif#356
• chore: bump module Go version to 1.21 by @​tri-adam in sylabs/sif#351

Full Changelog: https://github.com/sylabs/sif/compare/v2.15.2...v2.16.0

v2.15.2

What's Changed

• ci: start testing against Go 1.22-rc by @​tri-adam in sylabs/sif#340
• build(deps): bump github.com/sigstore/sigstore from 1.7.6 to 1.8.0 by @​dependabot in sylabs/sif#342
• build(deps): bump github.com/cloudflare/circl from 1.3.3 to 1.3.7 by @​dependabot in sylabs/sif#343
• build(deps): bump github.com/sigstore/sigstore from 1.8.0 to 1.8.1 by @​dependabot in sylabs/sif#344
• build(deps): bump github.com/google/uuid from 1.5.0 to 1.6.0 by @​dependabot in sylabs/sif#348
• build(deps): bump github.com/google/go-containerregistry from 0.17.0 to 0.19.0 by @​dependabot in sylabs/sif#349

... (truncated)

Commits

• de30604 Merge pull request #368 from tri-adam/go-1.23-rc
• 9ea2328 ci: add testing against Go 1.23 RC
• d242f61 Merge pull request #366 from tri-adam/dsse-refactor
• fc6a037 refactor: use DSSE wrappers from sigstore
• d63ee14 Merge pull request #365 from tri-adam/set-blob-digest
• b85400b feat: add SetOCIBlobDigest
• 3c091b8 Merge pull request #364 from tri-adam/file-refactor
• 84ca397 refactor: split add/del/set code into files
• f2f07f5 build(deps): bump github.com/spf13/cobra from 1.8.0 to 1.8.1 (#363)
• e9991e0 build(deps): bump github.com/google/go-containerregistry (#362)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)