chore(deps): update module github.com/sigstore/cosign/v2 to v2.5.3

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/sigstore/cosign/v2	v2.5.2 -> v2.5.3

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

sigstore/cosign (github.com/sigstore/cosign/v2)

v2.5.3

Compare Source

Features

• Add signing-config create command (#​4280)
• Allow multiple services to be specified for trusted-root create (#​4285)
• feat: Add OCI 1.1+ experimental support to tree (#​4205)
• Add validity period end for trusted-root create (#​4271)

Bug Fixes

• Fix cert verification logic for trusted-root/SCTs (#​4294)
• force when copying the latest image to overwrite (#​4298)
• avoid double-loading trustedroot from file (#​4264)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 17 additional dependencies were updated
• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.24.0 -> 1.24.3
github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric	v0.51.0 -> v0.53.0
github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping	v0.51.0 -> v0.53.0
github.com/aws/aws-sdk-go-v2/service/kms	v1.41.0 -> v1.41.2
github.com/buildkite/agent/v3	v3.98.2 -> v3.102.1
github.com/buildkite/go-pipeline	v0.13.3 -> v0.14.0
github.com/hashicorp/go-retryablehttp	v0.7.7 -> v0.7.8
github.com/in-toto/attestation	v1.1.1 -> v1.1.2
github.com/open-policy-agent/opa	v1.5.1 -> v1.6.0
github.com/sigstore/protobuf-specs	v0.4.3 -> v0.5.0
github.com/sigstore/rekor-tiles	v0.1.5 -> v0.1.7-0.20250624231741-98cd4a77300f
github.com/sigstore/sigstore-go	v1.0.0 -> v1.1.0
github.com/vektah/gqlparser/v2	v2.5.27 -> v2.5.28
gitlab.com/gitlab-org/api/client-go	v0.130.1 -> v0.134.0
google.golang.org/api	v0.237.0 -> v0.241.0
k8s.io/api	v0.33.1 -> v0.33.2
k8s.io/apimachinery	v0.33.1 -> v0.33.2
k8s.io/client-go	v0.33.1 -> v0.33.2