chore(deps): update module github.com/sigstore/rekor to v1.3.9 - autoclosed

[renovate-rancher]

This PR contains the following updates:

Package	Type	Update	Change
github.com/sigstore/rekor	require	patch	v1.3.6 -> v1.3.9

---

Release Notes

sigstore/rekor (github.com/sigstore/rekor)

v1.3.9

Compare Source

Features

• Cache checkpoint for inactive shards (#​2332)
• Support per-shard signing keys (#​2330)

Contributors

• Hayden B

v1.3.8

Compare Source

Bug Fixes

• fix zizmor issues (#​2298)
• remove unneeded value in log message (#​2282)

Quality Enhancements

• chore: relax go directive to permit 1.22.x
• fetch minisign from homebrew instead of custom ppa (#​2329)
• fix(ci): simplify GOVERSION extraction
• chore(deps): bump actions pins to latest
• Updates go and golangci-lint (#​2302)
• update builder to use go1.23.4 (#​2301)
• clean up spaces
• log request body on 500 error to aid debugging (#​2283)

Contributors

• Appu Goundan
• Bob Callaway
• Carlos Tadeu Panato Junior
• Dominic Evans
• sgpinkus

v1.3.7

Compare Source

New Features

• log request body on 500 error to aid debugging (#​2283)
• Add support for signing with Tink keyset (#​2228)
• Add public key hash check in Signed Note verification (#​2214)
• update Trillian TLS configuration (#​2202)
• Add TLS support for Trillian server (#​2164)
• Replace docker-compose with plugin if available (#​2153)
• Add flags to backfill script (#​2146)
• Unset DisableKeepalive for backfill HTTP client (#​2137)
• Add script to delete indexes from Redis (#​2120)
• Run CREATE statement in backfill script (#​2109)
• Add MySQL support to backfill script (#​2081)
• Run e2e tests on mysql and redis index backends (#​2079)

Bug Fixes

• remove unneeded value in log message (#​2282)
• Add error message when computing consistency proof (#​2278)
• fix validation error handling on API (#​2217)
• fix error in pretty-printed inclusion proof from verify subcommand (#​2210)
• Fix index scripts (#​2203)
• fix failing sharding test
• Better error handling in backfill script (#​2148)
• Batch entries in cleanup script (#​2158)
• Add missing workflow for index cleanup test (#​2121)
• hashedrekord: fix schema $id (#​2092)

Contributors

• Aditya Sirish
• Bob Callaway
• Colleen Murphy
• cpanato
• Firas Ghanmi
• Hayden B
• Hojoung (Brian) Jang
• William Woodruff

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[renovate-rancher]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 24 additional dependencies were updated

Details:

Package	Change
github.com/google/go-containerregistry	v0.19.1 -> v0.20.2
github.com/sigstore/sigstore	v1.8.3 -> v1.8.12
github.com/docker/cli	v24.0.7+incompatible -> v27.1.1+incompatible
github.com/go-logr/logr	v1.4.1 -> v1.4.2
github.com/klauspost/compress	v1.17.4 -> v1.17.11
github.com/letsencrypt/boulder	v0.0.0-20231026200631-000cd05d5491 -> v0.0.0-20240620165639-de9c06129bec
github.com/pelletier/go-toml/v2	v2.1.0 -> v2.2.2
github.com/secure-systems-lab/go-securesystemslib	v0.8.0 -> v0.9.0
github.com/spf13/cast	v1.6.0 -> v1.7.0
github.com/spf13/cobra	v1.8.0 -> v1.8.1
github.com/spf13/viper	v1.18.2 -> v1.19.0
go.opentelemetry.io/otel	v1.24.0 -> v1.32.0
go.opentelemetry.io/otel/metric	v1.24.0 -> v1.32.0
go.opentelemetry.io/otel/trace	v1.24.0 -> v1.32.0
golang.org/x/crypto	v0.31.0 -> v0.32.0
golang.org/x/exp	v0.0.0-20231108232855-2478ac86f678 -> v0.0.0-20240325151524-a685a6edb6d8
golang.org/x/mod	v0.17.0 -> v0.22.0
golang.org/x/net	v0.33.0 -> v0.34.0
golang.org/x/oauth2	v0.19.0 -> v0.25.0
golang.org/x/sys	v0.28.0 -> v0.29.0
golang.org/x/term	v0.27.0 -> v0.28.0
golang.org/x/time	v0.5.0 -> v0.9.0
google.golang.org/protobuf	v1.33.0 -> v1.36.4
k8s.io/klog/v2	v2.120.1 -> v2.130.1