fix(deps): update module github.com/sigstore/sigstore/pkg/signature/kms/gcp to v1.9.1

[red-hat-konflux]

This PR contains the following updates:

Package	Type	Update	Change
github.com/sigstore/sigstore/pkg/signature/kms/gcp	require	minor	v1.8.15 -> v1.9.1

---

Release Notes

sigstore/sigstore (github.com/sigstore/sigstore/pkg/signature/kms/gcp)

v1.9.1

Compare Source

What's Changed

• Implement default signing algorithms based on the key type by @​ret2libc in https://github.com/sigstore/sigstore/pull/2014

Full Changelog: sigstore/sigstore@v1.9.0...v1.9.1

v1.9.0

Compare Source

What's Changed

• Update KMS policy for new plugin interface by @​haydentherapper in https://github.com/sigstore/sigstore/pull/1987
• Update TUF root to latest v12 root by @​haydentherapper in https://github.com/sigstore/sigstore/pull/1988
• build(deps): Bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5 by @​dependabot in https://github.com/sigstore/sigstore/pull/1994
• upgrade go-jose to v4 by @​cpanato in https://github.com/sigstore/sigstore/pull/2000
• pkg/signature: expose Algorithm Details information by @​ret2libc in https://github.com/sigstore/sigstore/pull/2001

Full Changelog: sigstore/sigstore@v1.8.15...v1.9.0

---

Configuration

📅 Schedule: Branch creation - "after 5am on sunday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

This PR has been generated by MintMaker (powered by Renovate Bot).

[red-hat-konflux]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 7 additional dependencies were updated

Details:

Package	Change
cloud.google.com/go	v0.118.0 -> v0.118.2
cloud.google.com/go/iam	v1.3.1 -> v1.4.0
cloud.google.com/go/kms	v1.20.5 -> v1.21.0
github.com/googleapis/enterprise-certificate-proxy	v0.3.4 -> v0.3.5
golang.org/x/oauth2	v0.26.0 -> v0.28.0
google.golang.org/api	v0.223.0 -> v0.224.0
google.golang.org/genproto/googleapis/rpc	v0.0.0-20250219182151-9fdb1cabc7b2 -> v0.0.0-20250227231956-55c901821b1e

[openshift-ci]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: red-hat-konflux[bot]
Once this PR has been reviewed and has the lgtm label, please assign lance for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment