chore(deps): bump tuf from 3.0.0 to 3.1.0

[dependabot[bot]]

Bumps tuf from 3.0.0 to 3.1.0.

Release notes

Sourced from tuf's releases.

v3.1.0

See CHANGELOG.md for details.

Changelog

Sourced from tuf's changelog.

v3.1.0

Added

• Metadata API: move verify_delegate() to Root/Targets (#2378)
  • verify_delegate() on Metadata is now deprecated
• Metadata API: add get_verification_result() as verbose alternative for verify_delegate() (#2481)
• Metadata API: add MetaFile.from_data() convenience factory (#2273)

Changed

• Metadata API: change Root.roles type hint to Dict (#2411)
• Various minor improvements in tests (#2447, #2491), docs (#2390, #2392, #2474) and build (#2389, #2453, #2479, #2488)

Removed

• build: Python 3.7 support (#2460)

Commits

• f04dc71 Merge pull request #2492 from lukpueh/release-3.1.0
• ed521c0 Merge pull request #2490 from theupdateframework/dependabot/pip/mypy-1.6.0
• c0c21ca Release python-tuf 3.1.0
• 6fed68b Merge pull request #2491 from lukpueh/rm-obsolete-fixtures
• 438518f tests: remove unused and obsolete test metadata
• f856287 build(deps): bump mypy from 1.5.1 to 1.6.0
• 038ecd6 Merge pull request #2488 from jku/revert-scorecard-pinning
• d5c953d workflows: Partially revert action versions
• 00b67c0 Merge pull request #2479 from jku/dont-pin-code-scanner-actions
• c7f3f6b Merge pull request #2484 from theupdateframework/dependabot/github_actions/ac...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)