fix(deps): update module github.com/sigstore/sigstore/pkg/signature/kms/azure to v1.9.1

[red-hat-konflux]

This PR contains the following updates:

Package	Type	Update	Change
github.com/sigstore/sigstore/pkg/signature/kms/azure	require	minor	v1.8.9 -> v1.9.1

---

Release Notes

sigstore/sigstore (github.com/sigstore/sigstore/pkg/signature/kms/azure)

v1.9.1

Compare Source

What's Changed

• Implement default signing algorithms based on the key type by @​ret2libc in https://github.com/sigstore/sigstore/pull/2014

Full Changelog: sigstore/sigstore@v1.9.0...v1.9.1

v1.9.0

Compare Source

What's Changed

• Update KMS policy for new plugin interface by @​haydentherapper in https://github.com/sigstore/sigstore/pull/1987
• Update TUF root to latest v12 root by @​haydentherapper in https://github.com/sigstore/sigstore/pull/1988
• build(deps): Bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5 by @​dependabot in https://github.com/sigstore/sigstore/pull/1994
• upgrade go-jose to v4 by @​cpanato in https://github.com/sigstore/sigstore/pull/2000
• pkg/signature: expose Algorithm Details information by @​ret2libc in https://github.com/sigstore/sigstore/pull/2001

Full Changelog: sigstore/sigstore@v1.8.15...v1.9.0

v1.8.15

Compare Source

What's Changed

• pkg/signature: fix RSA PSS 3072 key size in algorithm registry in https://github.com/sigstore/sigstore/pull/1981
• check concrete type for non-nil to stop fuzzing crash in https://github.com/sigstore/sigstore/pull/1983
• fix: cliplugin: return ErrorProviderNotFound when calling Get with a path in https://github.com/sigstore/sigstore/pull/1982

Full Changelog: sigstore/sigstore@v1.8.14...v1.8.15

v1.8.14

Compare Source

What's Changed

This is the same content as v1.8.13, with a CI/CD fix.

• add initial plugin support for KMSs in https://github.com/sigstore/sigstore/pull/1901
• cliplugin: add mocks and serialization testing in https://github.com/sigstore/sigstore/pull/1918
• kms plugin: add SignMessage in https://github.com/sigstore/sigstore/pull/1919
• cliplugin: add VerifySignature in https://github.com/sigstore/sigstore/pull/1944
• cliplugin: add windows ci testing in https://github.com/sigstore/sigstore/pull/1951
• Create Algorithm Registry API in https://github.com/sigstore/sigstore/pull/1601
• cliplugin: add SupportedAlgorithms(), PublicKey(), and CryptoSigner(). in https://github.com/sigstore/sigstore/pull/1946
• cliplugin: use caller contexts in https://github.com/sigstore/sigstore/pull/1947
• cliplugin: semver, add tests for hash func encoding in https://github.com/sigstore/sigstore/pull/1948
• cliplugin: lint fixes in https://github.com/sigstore/sigstore/pull/1958
• cliplugin: convert module to package only in https://github.com/sigstore/sigstore/pull/1956

v1.8.12

Compare Source

What's Changed

• build(deps): Bump google.golang.org/api from 0.210.0 to 0.212.0 in /pkg/signature/kms/gcp by @​dependabot in https://github.com/sigstore/sigstore/pull/1912
• build(deps): Bump google.golang.org/protobuf from 1.35.2 to 1.36.0 in /pkg/signature/kms/gcp by @​dependabot in https://github.com/sigstore/sigstore/pull/1911
• build(deps): Bump actions/setup-go from 5.1.0 to 5.2.0 in the all group by @​dependabot in https://github.com/sigstore/sigstore/pull/1909
• build(deps): Bump google.golang.org/api from 0.212.0 to 0.214.0 in /pkg/signature/kms/gcp by @​dependabot in https://github.com/sigstore/sigstore/pull/1917
• build(deps): Bump hashicorp/vault from 1.18.2 to 1.18.3 in /test/e2e in the all group by @​dependabot in https://github.com/sigstore/sigstore/pull/1915
• build(deps): Bump the gomod group across 2 directories with 5 updates by @​dependabot in https://github.com/sigstore/sigstore/pull/1916
• build(deps): Bump cloud.google.com/go/kms from 1.20.3 to 1.20.4 in /pkg/signature/kms/gcp in the gomod group across 1 directory by @​dependabot in https://github.com/sigstore/sigstore/pull/1920
• build(deps): Bump github.com/coreos/go-oidc/v3 from 3.11.0 to 3.12.0 by @​dependabot in https://github.com/sigstore/sigstore/pull/1924
• build(deps): Bump golang.org/x/oauth2 from 0.24.0 to 0.25.0 by @​dependabot in https://github.com/sigstore/sigstore/pull/1921
• build(deps): Bump golang.org/x/term from 0.27.0 to 0.28.0 by @​dependabot in https://github.com/sigstore/sigstore/pull/1922
• build(deps): Bump golang.org/x/crypto from 0.31.0 to 0.32.0 by @​dependabot in https://github.com/sigstore/sigstore/pull/1923
• build(deps): Bump golang.org/x/crypto from 0.28.0 to 0.31.0 in /test/fuzz by @​dependabot in https://github.com/sigstore/sigstore/pull/1908
• build(deps): Bump github.com/secure-systems-lab/go-securesystemslib from 0.8.0 to 0.9.0 by @​dependabot in https://github.com/sigstore/sigstore/pull/1910
• build(deps): Bump the tools group across 1 directory with 2 updates by @​dependabot in https://github.com/sigstore/sigstore/pull/1913
• cleanup ci by @​cpanato in https://github.com/sigstore/sigstore/pull/1927

Full Changelog: sigstore/sigstore@v1.8.11...v1.8.12

v1.8.11

Compare Source

What's Changed

• several dependabot updates
• Replace custom auth code with azidentity.NewDefaultCredential for Azure KMS client by @​malancas in https://github.com/sigstore/sigstore/pull/1888
• fix: set go module directive to 1.22.0 by @​dnwe in https://github.com/sigstore/sigstore/pull/1878

New Contributors

• @​dnwe made their first contribution in https://github.com/sigstore/sigstore/pull/1878

Full Changelog: sigstore/sigstore@v1.8.10...v1.8.11

v1.8.10

Compare Source

What's Changed

• fix(kms): fix CreateKey may panic when using GCP KMS by @​mozillazg in https://github.com/sigstore/sigstore/pull/1829
• update to go1.22.7 and ci job by @​cpanato in https://github.com/sigstore/sigstore/pull/1847
• Mark TUF client as deprecated by @​haydentherapper in https://github.com/sigstore/sigstore/pull/1858
• bump to go 1.22.8 by @​cpanato in https://github.com/sigstore/sigstore/pull/1865

and several dependencies updates

New Contributors

• @​mozillazg made their first contribution in https://github.com/sigstore/sigstore/pull/1829

Full Changelog: sigstore/sigstore@v1.8.9...v1.8.10

---

Configuration

📅 Schedule: Branch creation - "after 5am on sunday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

This PR has been generated by MintMaker (powered by Renovate Bot).

[red-hat-konflux]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 22 additional dependencies were updated

Details:

Package	Change
github.com/google/go-cmp	v0.6.0 -> v0.7.0
golang.org/x/net	v0.34.0 -> v0.35.0
google.golang.org/protobuf	v1.36.1 -> v1.36.5
cloud.google.com/go/compute/metadata	v0.5.2 -> v0.6.0
github.com/Azure/azure-sdk-for-go/sdk/azcore	v1.14.0 -> v1.17.0
github.com/Azure/azure-sdk-for-go/sdk/azidentity	v1.7.0 -> v1.8.2
github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys	v1.1.0 -> v1.3.1
github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/internal	v1.0.0 -> v1.1.1
github.com/AzureAD/microsoft-authentication-library-for-go	v1.2.2 -> v1.3.3
github.com/go-jose/go-jose/v4	v4.0.2 -> v4.0.5
github.com/google/go-containerregistry	v0.20.2 -> v0.20.3
github.com/secure-systems-lab/go-securesystemslib	v0.8.0 -> v0.9.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp	v0.54.0 -> v0.58.0
go.opentelemetry.io/otel	v1.29.0 -> v1.33.0
go.opentelemetry.io/otel/metric	v1.29.0 -> v1.33.0
go.opentelemetry.io/otel/trace	v1.29.0 -> v1.33.0
golang.org/x/crypto	v0.32.0 -> v0.36.0
golang.org/x/oauth2	v0.24.0 -> v0.25.0
golang.org/x/sync	v0.10.0 -> v0.12.0
golang.org/x/sys	v0.29.0 -> v0.31.0
golang.org/x/term	v0.28.0 -> v0.30.0
golang.org/x/text	v0.21.0 -> v0.23.0

[openshift-ci]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: red-hat-konflux[bot]
Once this PR has been reviewed and has the lgtm label, please assign lance for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment