fix(deps): update module github.com/sigstore/sigstore/pkg/signature/kms/azure to v1.8.15

[red-hat-konflux]

This PR contains the following updates:

Package	Type	Update	Change
github.com/sigstore/sigstore/pkg/signature/kms/azure	require	patch	v1.8.8 -> v1.8.15

---

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

---

Release Notes

sigstore/sigstore (github.com/sigstore/sigstore/pkg/signature/kms/azure)

v1.8.15

Compare Source

What's Changed

• pkg/signature: fix RSA PSS 3072 key size in algorithm registry in https://github.com/sigstore/sigstore/pull/1981
• check concrete type for non-nil to stop fuzzing crash in https://github.com/sigstore/sigstore/pull/1983
• fix: cliplugin: return ErrorProviderNotFound when calling Get with a path in https://github.com/sigstore/sigstore/pull/1982

Full Changelog: sigstore/sigstore@v1.8.14...v1.8.15

v1.8.14

Compare Source

What's Changed

This is the same content as v1.8.13, with a CI/CD fix.

• add initial plugin support for KMSs in https://github.com/sigstore/sigstore/pull/1901
• cliplugin: add mocks and serialization testing in https://github.com/sigstore/sigstore/pull/1918
• kms plugin: add SignMessage in https://github.com/sigstore/sigstore/pull/1919
• cliplugin: add VerifySignature in https://github.com/sigstore/sigstore/pull/1944
• cliplugin: add windows ci testing in https://github.com/sigstore/sigstore/pull/1951
• Create Algorithm Registry API in https://github.com/sigstore/sigstore/pull/1601
• cliplugin: add SupportedAlgorithms(), PublicKey(), and CryptoSigner(). in https://github.com/sigstore/sigstore/pull/1946
• cliplugin: use caller contexts in https://github.com/sigstore/sigstore/pull/1947
• cliplugin: semver, add tests for hash func encoding in https://github.com/sigstore/sigstore/pull/1948
• cliplugin: lint fixes in https://github.com/sigstore/sigstore/pull/1958
• cliplugin: convert module to package only in https://github.com/sigstore/sigstore/pull/1956

v1.8.12

Compare Source

What's Changed

• build(deps): Bump google.golang.org/api from 0.210.0 to 0.212.0 in /pkg/signature/kms/gcp by @​dependabot in https://github.com/sigstore/sigstore/pull/1912
• build(deps): Bump google.golang.org/protobuf from 1.35.2 to 1.36.0 in /pkg/signature/kms/gcp by @​dependabot in https://github.com/sigstore/sigstore/pull/1911
• build(deps): Bump actions/setup-go from 5.1.0 to 5.2.0 in the all group by @​dependabot in https://github.com/sigstore/sigstore/pull/1909
• build(deps): Bump google.golang.org/api from 0.212.0 to 0.214.0 in /pkg/signature/kms/gcp by @​dependabot in https://github.com/sigstore/sigstore/pull/1917
• build(deps): Bump hashicorp/vault from 1.18.2 to 1.18.3 in /test/e2e in the all group by @​dependabot in https://github.com/sigstore/sigstore/pull/1915
• build(deps): Bump the gomod group across 2 directories with 5 updates by @​dependabot in https://github.com/sigstore/sigstore/pull/1916
• build(deps): Bump cloud.google.com/go/kms from 1.20.3 to 1.20.4 in /pkg/signature/kms/gcp in the gomod group across 1 directory by @​dependabot in https://github.com/sigstore/sigstore/pull/1920
• build(deps): Bump github.com/coreos/go-oidc/v3 from 3.11.0 to 3.12.0 by @​dependabot in https://github.com/sigstore/sigstore/pull/1924
• build(deps): Bump golang.org/x/oauth2 from 0.24.0 to 0.25.0 by @​dependabot in https://github.com/sigstore/sigstore/pull/1921
• build(deps): Bump golang.org/x/term from 0.27.0 to 0.28.0 by @​dependabot in https://github.com/sigstore/sigstore/pull/1922
• build(deps): Bump golang.org/x/crypto from 0.31.0 to 0.32.0 by @​dependabot in https://github.com/sigstore/sigstore/pull/1923
• build(deps): Bump golang.org/x/crypto from 0.28.0 to 0.31.0 in /test/fuzz by @​dependabot in https://github.com/sigstore/sigstore/pull/1908
• build(deps): Bump github.com/secure-systems-lab/go-securesystemslib from 0.8.0 to 0.9.0 by @​dependabot in https://github.com/sigstore/sigstore/pull/1910
• build(deps): Bump the tools group across 1 directory with 2 updates by @​dependabot in https://github.com/sigstore/sigstore/pull/1913
• cleanup ci by @​cpanato in https://github.com/sigstore/sigstore/pull/1927

Full Changelog: sigstore/sigstore@v1.8.11...v1.8.12

v1.8.11

Compare Source

What's Changed

• several dependabot updates
• Replace custom auth code with azidentity.NewDefaultCredential for Azure KMS client by @​malancas in https://github.com/sigstore/sigstore/pull/1888
• fix: set go module directive to 1.22.0 by @​dnwe in https://github.com/sigstore/sigstore/pull/1878

New Contributors

• @​dnwe made their first contribution in https://github.com/sigstore/sigstore/pull/1878

Full Changelog: sigstore/sigstore@v1.8.10...v1.8.11

v1.8.10

Compare Source

What's Changed

• fix(kms): fix CreateKey may panic when using GCP KMS by @​mozillazg in https://github.com/sigstore/sigstore/pull/1829
• update to go1.22.7 and ci job by @​cpanato in https://github.com/sigstore/sigstore/pull/1847
• Mark TUF client as deprecated by @​haydentherapper in https://github.com/sigstore/sigstore/pull/1858
• bump to go 1.22.8 by @​cpanato in https://github.com/sigstore/sigstore/pull/1865

and several dependencies updates

New Contributors

• @​mozillazg made their first contribution in https://github.com/sigstore/sigstore/pull/1829

Full Changelog: sigstore/sigstore@v1.8.9...v1.8.10

v1.8.9

Compare Source

What's Changed

• fuzzing: improve coverage by @​AdamKorcz in https://github.com/sigstore/sigstore/pull/1809
• Deserialize ed25519 keys from hashivault correctly by @​stevenjohnstone in https://github.com/sigstore/sigstore/pull/1811
• oauthflow: Add SubjectFromUnverifiedToken by @​adityasaky in https://github.com/sigstore/sigstore/pull/1826

Full Changelog: sigstore/sigstore@v1.8.8...v1.8.9

---

Configuration

📅 Schedule: Branch creation - "after 5am on sunday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

This PR has been generated by MintMaker (powered by Renovate Bot).

[red-hat-konflux]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 14 additional dependencies were updated

Details:

Package	Change
github.com/secure-systems-lab/go-securesystemslib	v0.8.0 -> v0.9.0
github.com/sigstore/protobuf-specs	v0.3.2 -> v0.4.0
github.com/stretchr/testify	v1.9.0 -> v1.10.0
golang.org/x/crypto	v0.31.0 -> v0.32.0
golang.org/x/term	v0.27.0 -> v0.28.0
google.golang.org/protobuf	v1.35.2 -> v1.36.4
github.com/Azure/azure-sdk-for-go/sdk/azcore	v1.14.0 -> v1.17.0
github.com/Azure/azure-sdk-for-go/sdk/azidentity	v1.7.0 -> v1.8.0
github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys	v1.1.0 -> v1.3.0
github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/internal	v1.0.0 -> v1.1.0
github.com/AzureAD/microsoft-authentication-library-for-go	v1.2.2 -> v1.3.1
github.com/jellydator/ttlcache/v3	v3.2.0 -> v3.3.0
golang.org/x/net	v0.33.0 -> v0.34.0
golang.org/x/sys	v0.28.0 -> v0.29.0

[openshift-ci]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: red-hat-konflux[bot]

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[red-hat-konflux]

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update (v1.8.15). You will get a PR once a newer version is released. To ignore this dependency forever, add it to the ignoreDeps array of your Renovate config.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.