chore(deps): update dependency sigstore/cosign to v2.3.0

[renovate[bot]]

This PR contains the following updates:

Package	Update	Change
sigstore/cosign	minor	v2.2.4 -> v2.3.0

---

Release Notes

sigstore/cosign (sigstore/cosign)

### [`v2.3.0`](https://togithub.com/sigstore/cosign/blob/HEAD/CHANGELOG.md#v230) [Compare Source](https://togithub.com/sigstore/cosign/compare/v2.2.4...v2.3.0) #### Features - Add PayloadProvider interface to decouple AttestationToPayloadJSON from oci.Signature interface ([#​3693](https://togithub.com/sigstore/cosign/issues/3693)) - add registry options to cosign save ([#​3645](https://togithub.com/sigstore/cosign/issues/3645)) - Add debug providers command. ([#​3728](https://togithub.com/sigstore/cosign/issues/3728)) - Make config layers in ociremote mountable ([#​3741](https://togithub.com/sigstore/cosign/issues/3741)) - upgrade to go1.22 ([#​3739](https://togithub.com/sigstore/cosign/issues/3739)) - adds tsa cert chain check for env var or tuf targets. ([#​3600](https://togithub.com/sigstore/cosign/issues/3600)) - add --ca-roots and --ca-intermediates flags to 'cosign verify' ([#​3464](https://togithub.com/sigstore/cosign/issues/3464)) - add handling of keyless verification for all verify commands ([#​3761](https://togithub.com/sigstore/cosign/issues/3761)) #### Bug Fixes - fix: close attestationFile ([#​3679](https://togithub.com/sigstore/cosign/issues/3679)) - Set `bundleVerified` to true after Rekor verification (Resolves [#​3740](https://togithub.com/sigstore/cosign/issues/3740)) ([#​3745](https://togithub.com/sigstore/cosign/issues/3745)) #### Documentation - Document ImportKeyPair and LoadPrivateKey functions in pkg/cosign ([#​3776](https://togithub.com/sigstore/cosign/issues/3776)) #### Testing - Refactor KMS E2E tests ([#​3684](https://togithub.com/sigstore/cosign/issues/3684)) - Remove sign_blob_test.sh test ([#​3707](https://togithub.com/sigstore/cosign/issues/3707)) - Remove KMS E2E test script ([#​3702](https://togithub.com/sigstore/cosign/issues/3702)) - Refactor insecure registry E2E tests ([#​3701](https://togithub.com/sigstore/cosign/issues/3701)) #### Contributors - Billy Lynch - bminahan73 - Bob Callaway - Carlos Tadeu Panato Junior - Cody Soyland - Colleen Murphy - Dmitry Savintsev - guangwu - Hayden B - Hector Fernandez - ian hundere - Jason Power - Jon Johnson - Max Lambrecht - Meeki1l

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• [ ] If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.