chore(deps): bump github.com/sigstore/sigstore from 1.8.3 to 1.8.4

[dependabot[bot]]

Bumps github.com/sigstore/sigstore from 1.8.3 to 1.8.4.

Release notes

Sourced from github.com/sigstore/sigstore's releases.

v1.8.4

What's Changed

• finish move of reusable-release to sigstore/community by @​bobcallaway in sigstore/sigstore#1699
• update Makefile so CodeQL covers all go files by @​bobcallaway in sigstore/sigstore#1700
• bump go to 1.21 by @​bobcallaway in sigstore/sigstore#1701
• pin container images to quiet scorecard alert by @​bobcallaway in sigstore/sigstore#1709
• set gh action perms by @​bobcallaway in sigstore/sigstore#1710
• tuf: Remove debug metadata downloads by @​jku in sigstore/sigstore#1717
• Fix Hashicorp Vault KMS to use PKCS1 v1.5 by @​berkitamas in sigstore/sigstore#1736

New Contributors

• @​jku made their first contribution in sigstore/sigstore#1717
• @​berkitamas made their first contribution in sigstore/sigstore#1736

Full Changelog: https://github.com/sigstore/sigstore/compare/v1.8.3...v1.8.4

Commits

• 5cd937f build(deps): Bump github.com/hashicorp/vault/api
• 96fc144 build(deps): Bump the all group in /pkg/signature/kms/gcp with 2 updates
• 2b99005 build(deps): Bump the all group in /pkg/signature/kms/aws with 3 updates
• fa5d64b sync go mod
• 186a1e5 build(deps): Bump the all group across 1 directory with 4 updates
• 1ba2030 Fix Hashicorp Vault KMS to use PKCS1 v1.5
• ec88c0b ---
• bbe51a7 ---
• 1d8a874 ---
• acb4db4 build(deps): Bump golangci/golangci-lint-action from 5.3.0 to 6.0.1
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)