chore(deps): bump github.com/sigstore/gitsign from 0.10.1 to 0.10.2

[dependabot[bot]]

Bumps github.com/sigstore/gitsign from 0.10.1 to 0.10.2.

Release notes

Sourced from github.com/sigstore/gitsign's releases.

v0.10.2

What's Changed

Not much! All dependency bumps.

• Bump golang.org/x/crypto from 0.21.0 to 0.22.0 by @​dependabot in sigstore/gitsign#490
• Bump imjasonh/setup-crane from 0.2 to 0.3 by @​dependabot in sigstore/gitsign#485
• Bump golang.org/x/oauth2 from 0.18.0 to 0.19.0 by @​dependabot in sigstore/gitsign#489
• Bump github.com/sigstore/rekor from 1.3.5 to 1.3.6 by @​dependabot in sigstore/gitsign#487
• Bump github.com/sigstore/protobuf-specs from 0.3.0 to 0.3.1 by @​dependabot in sigstore/gitsign#486
• Bump github.com/sigstore/fulcio from 1.4.4 to 1.4.5 by @​dependabot in sigstore/gitsign#488
• Remove local-user validation. by @​wlynch in sigstore/gitsign#491
• Bump github.com/sigstore/cosign/v2 from 2.2.3 to 2.2.4 by @​dependabot in sigstore/gitsign#492
• Bump sigstore/cosign-installer from 3.4.0 to 3.5.0 by @​dependabot in sigstore/gitsign#493
• Bump golang.org/x/net from 0.22.0 to 0.23.0 by @​dependabot in sigstore/gitsign#494
• Bump actions/checkout from 4.1.2 to 4.1.3 by @​dependabot in sigstore/gitsign#495
• e2e.yaml: Avoid non-versioned TUF metadata by @​jku in sigstore/gitsign#496
• Bump golangci/golangci-lint-action from 4.0.0 to 5.0.0 by @​dependabot in sigstore/gitsign#500
• Bump golang.org/x/oauth2 from 0.19.0 to 0.20.0 by @​dependabot in sigstore/gitsign#503
• Bump google.golang.org/protobuf from 1.33.0 to 1.34.0 by @​dependabot in sigstore/gitsign#502
• Bump actions/setup-go from 5.0.0 to 5.0.1 by @​dependabot in sigstore/gitsign#504
• Bump golangci/golangci-lint-action from 5.0.0 to 5.3.0 by @​dependabot in sigstore/gitsign#505
• Bump actions/checkout from 4.1.3 to 4.1.4 by @​dependabot in sigstore/gitsign#499
• Bump anchore/sbom-action from 0.15.10 to 0.15.11 by @​dependabot in sigstore/gitsign#498
• Bump goreleaser/goreleaser-action from 5.0.0 to 5.1.0 by @​dependabot in sigstore/gitsign#512
• Bump google.golang.org/protobuf from 1.34.0 to 1.34.1 by @​dependabot in sigstore/gitsign#508
• Bump golangci/golangci-lint-action from 5.3.0 to 6.0.1 by @​dependabot in sigstore/gitsign#511
• Bump actions/checkout from 4.1.4 to 4.1.5 by @​dependabot in sigstore/gitsign#510
• Bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2 by @​dependabot in sigstore/gitsign#509
• Bump golang.org/x/crypto from 0.22.0 to 0.23.0 by @​dependabot in sigstore/gitsign#507

New Contributors

• @​jku made their first contribution in sigstore/gitsign#496

Full Changelog: https://github.com/sigstore/gitsign/compare/v0.10.1...v0.10.2

Commits

• 537cd20 Bump golang.org/x/crypto from 0.22.0 to 0.23.0 (#507)
• 78acfdc Bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2 (#509)
• 61f32b6 Bump actions/checkout from 4.1.4 to 4.1.5 (#510)
• 6b17765 Bump golangci/golangci-lint-action from 5.3.0 to 6.0.1 (#511)
• 9ffb4dc Bump google.golang.org/protobuf from 1.34.0 to 1.34.1 (#508)
• b6e5010 Bump goreleaser/goreleaser-action from 5.0.0 to 5.1.0 (#512)
• c5a6d84 Bump anchore/sbom-action from 0.15.10 to 0.15.11 (#498)
• 1248d80 Bump actions/checkout from 4.1.3 to 4.1.4 (#499)
• 551d59e Bump golangci/golangci-lint-action from 5.0.0 to 5.3.0 (#505)
• 4b987b5 Bump actions/setup-go from 5.0.0 to 5.0.1 (#504)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)