[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
sigstore	==4.5.0 → ==4.5.1

---

Release Notes

sigstore/sigstore-python (sigstore)

v4.5.1

Compare Source

Changed

• Removed the pyasn1 dependency and raised the minimum cryptography version
  from 42 to 47.
  (#​1866)
• Certificate chain verification now uses cryptography, removing the
  pyOpenSSL dependency.
  (#​1867)
• Switched the build backend from flit_core to uv_build.
  (#​1892)

Fixed

• Parsing a malformed in-toto statement now includes the underlying validation
  error, instead of discarding it. StatementBuilder.build() already did this;
  Statement(contents=...) did not, so a rejected digest algorithm, a missing
  field and a bad _type were indistinguishable.
  (#​1846)
• Verifier now raises VerificationError when the trusted root contains no
  transparency log instances, instead of leaking a raw IndexError
  (#​1880)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.