chore: sync with main

[kommendorkapten]

Please fill in the fields below to submit a pull request. The more information that is provided, the better.

Fixes #

Release Notes:

Types of changes:

• [ ] Bug fix (non-breaking change which fixes an issue)
• [ ] New feature (non-breaking change which adds functionality)
• [ ] Breaking change (fix or feature that would cause existing functionality to not work as expected). Please ensure that your PR title is a Conventional Commit breaking change (with a !, as in feat!: change foo).

Description of the changes being introduced by the pull request:

Please verify and check that the pull request fulfills the following requirements:

• [ ] Tests have been added for the bug fix or new feature
• [ ] Docs have been added for the bug fix or new feature

[rdimitrov]

Should we merge all pending PRs - ie. https://github.com/theupdateframework/go-tuf/pull/582 and the ones from dependabot so we can rebase this one and merge it like that?

[kommendorkapten]

yeah, good call out on merge all prs first.