chore(deps): bump github.com/containers/image/v5 from 5.30.0 to 5.32.2

[dependabot[bot]]

Bumps github.com/containers/image/v5 from 5.30.0 to 5.32.2.

Release notes

Sourced from github.com/containers/image/v5's releases.

v5.32.2

This adds the ability to accept sigstore signatures signed by any key from a set of several (huge thanks to @​dcermak and @​danishprakash for doing almost all the work), and Rekor log presence proofs signed by any key from a set of several keys.

v5.32.1

What's Changed

• Bump c/storage to v1.55.0, c/image to v5.32.0 by @​TomSweeneyRedHat in containers/image#2495
• fix(deps): update module github.com/vbauerster/mpb/v8 to v8.7.5 by @​renovate in containers/image#2496
• Record (TOC digest → DiffID) mapping in BlobInfoCache by @​mtrmac in containers/image#2321
• Revamp codespell by @​kolyshkin in containers/image#2498
• fix(deps): update module golang.org/x/oauth2 to v0.22.0 by @​renovate in containers/image#2501
• fix(deps): update module golang.org/x/sync to v0.8.0 by @​renovate in containers/image#2502
• manifest: LayerInfos: preallocate the slice by @​kolyshkin in containers/image#2499
• zstd:chunked refactoring for early review by @​mtrmac in containers/image#2503
• fix(deps): update module golang.org/x/crypto to v0.26.0 by @​renovate in containers/image#2504
• Record zstd:chunked format, and annotations, in BlobInfoCache by @​mtrmac in containers/image#2487

Full Changelog: https://github.com/containers/image/compare/v5.32.0...v5.32.1

v5.32.0

What's Changed

• Bump to c/storage v1.54.0 then c/image to v5.31.0 and then to v5.31.1-dev by @​TomSweeneyRedHat in containers/image#2425
• Bump to v5.32.0-dev by @​TomSweeneyRedHat in containers/image#2430
• fix(deps): update module github.com/docker/docker-credential-helpers to v0.8.2 by @​renovate in containers/image#2433
• fix(deps): update module github.com/burntsushi/toml to v1.4.0 by @​renovate in containers/image#2434
• [CI:DOCS] Update dependency golangci/golangci-lint to v1.59.0 by @​renovate in containers/image#2427
• fix(deps): update module github.com/sigstore/sigstore to v1.8.4 by @​renovate in containers/image#2436
• blobinfocache: add function to delete the cache directory by @​giuseppe in containers/image#2435
• chore(deps): update dependency containers/automation_images to v20240529 by @​renovate in containers/image#2414
• fix(deps): update module github.com/hashicorp/go-retryablehttp to v0.7.7 by @​renovate in containers/image#2437
• Update github.com/letsencrypt/boulder by @​mtrmac in containers/image#2438
• fix(deps): update golang.org/x/exp digest to fd00a4e by @​renovate in containers/image#2439
• Don't abort listing tags when we encounter a digest by @​mtrmac in containers/image#2440
• fix(deps): update module golang.org/x/oauth2 to v0.21.0 by @​renovate in containers/image#2441
• [Additional Layer Store] Enable Additional Layer Store to perform registry authentication by @​ktock in containers/image#2417
• fix(deps): update module golang.org/x/crypto to v0.24.0 by @​renovate in containers/image#2442
• fix(deps): update module github.com/docker/cli to v26.1.4+incompatible by @​renovate in containers/image#2444
• [CI:DOCS] Update dependency golangci/golangci-lint to v1.59.1 by @​renovate in containers/image#2446
• fix(deps): update module github.com/klauspost/compress to v1.17.9 by @​renovate in containers/image#2448
• fix(deps): update module github.com/sylabs/sif/v2 to v2.17.0 by @​renovate in containers/image#2455
• Add more context to errors when obtaining a registry access token by @​mtrmac in containers/image#2454
• fix(deps): update module github.com/docker/docker to v27 by @​renovate in containers/image#2459
• fix(deps): update module github.com/docker/cli to v27 by @​renovate in containers/image#2457
• fix(deps): update module github.com/docker/docker to v27.0.2+incompatible by @​renovate in containers/image#2463
• fix(deps): update module github.com/docker/cli to v27.0.2+incompatible by @​renovate in containers/image#2462
• Warn that docker-archive and oci-archive overwrite the whole file by @​mtrmac in containers/image#2468
• fix(deps): update golang.org/x/exp digest to 7f521ea by @​renovate in containers/image#2470
• fix(deps): update module github.com/sylabs/sif/v2 to v2.17.1 by @​renovate in containers/image#2469
• Improve the error message when MessageDetails.SignedBy == nil by @​mtrmac in containers/image#2466
• Drop the toolchain directive from go.mod by @​mtrmac in containers/image#2473

... (truncated)

Commits

• 0b425a4 Release 5.32.2
• 2a87b21 Support accepting multiple Rekor public keys
• 95c0635 Add field KeyPaths and KeyDatas to prSigstoreSigned
• d42de59 Split verifySigstorePayloadBlobSignature from VerifySigstorePayload
• a5ea016 Use loadBytesFromConfigSources in prSignedBy.isSignatureAuthorAccepted
• 03550b4 Turn loadBytesFromDataOrPath into loadBytesFromConfigSources
• c0c8d34 Use InvalidPolicyFormatError for invalid sigstore options
• 4bcaca1 Merge pull request #2511 from mtrmac/5.32-version
• c94eadb Fix the version number
• 6a17c28 Merge pull request #2508 from mtrmac/5.32-zstd
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)