chore(deps): Bump github.com/sigstore/scaffolding from 0.6.17 to 0.7.1

[dependabot[bot]]

Bumps github.com/sigstore/scaffolding from 0.6.17 to 0.7.1.

Release notes

Sourced from github.com/sigstore/scaffolding's releases.

v0.7.1

Thanks to all contributors!

What's Changed

• modules/tuf: Add legacyBucketReader role for TUF SA by @​jku in sigstore/scaffolding#1011
• bump to csp v2.10.0 by @​bobcallaway in sigstore/scaffolding#1035
• Make security groups and attestations optional by @​cmurphy in sigstore/scaffolding#1036
• bump missed module versions to 5.21.0 by @​bobcallaway in sigstore/scaffolding#1041
• bump terraform updates to monthly since google provider releases weekly by @​bobcallaway in sigstore/scaffolding#1060
• bump google tf provider to 5.24.0 release by @​bobcallaway in sigstore/scaffolding#1061
• bump to terraform v1.8.0 by @​bobcallaway in sigstore/scaffolding#1064
• Add gRPC calls for Fulcio on prober by @​javanlacerda in sigstore/scaffolding#1062
• building a new body for conflict responses by @​javanlacerda in sigstore/scaffolding#1068
• drop k8s 1.25/26 releases due to EOL and add tests with go1.22 by @​cpanato in sigstore/scaffolding#1084
• Add database for rekor search indexes by @​cmurphy in sigstore/scaffolding#1085
• Make terraform more configurable by @​cmurphy in sigstore/scaffolding#1087
• Add rekor-mysql ExternalSecret by @​cmurphy in sigstore/scaffolding#1099
• Updates for Go and cloud-sql-connectors/cloud-sql-proxy by @​cpanato in sigstore/scaffolding#1102
• ci: update knative, scaffolding release and remove deprecated cosign flag by @​cpanato in sigstore/scaffolding#1103
• fix image tag by @​cpanato in sigstore/scaffolding#1105

New Contributors

• @​jku made their first contribution in sigstore/scaffolding#1011
• @​javanlacerda made their first contribution in sigstore/scaffolding#1062

Full Changelog: https://github.com/sigstore/scaffolding/compare/v0.6.17...v0.7.1

Commits

• ca17aba fix image tag (#1105)
• 7e984db Bump hashicorp/google from 5.27.0 to 5.29.1 in /terraform/gcp/modules/monitor...
• 6737637 ci: update knative, scaffolding release and remove deprecatred cosign flag (#...
• d94d69e Updates for Go and cloud-sql-connectors/cloud-sql-proxy (#1102)
• b55bb16 Add rekor-mysql ExternalSecret (#1099)
• b75bf41 Make terraform more configurable (#1087)
• b163991 Bump sigs.k8s.io/release-utils from 0.8.1 to 0.8.2 (#1097)
• f69d1fa Bump github.com/hashicorp/go-retryablehttp from 0.7.5 to 0.7.6 (#1092)
• 7e9b984 Bump golang.org/x/net from 0.24.0 to 0.25.0 (#1093)
• 3b4f568 Bump google.golang.org/protobuf from 1.34.0 to 1.34.1 (#1094)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot[bot]]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.