Merge pull request #1158 from docker/dependabot/npm_and_yarn/sigstore/bundle-5.0.0

build(deps): bump @sigstore/bundle from 4.0.0 to 5.0.0

Author: crazy-max

package.json

@@ -50,7 +50,7 @@
     "@actions/http-client": "^4.0.1",
     "@actions/io": "^3.0.2",
     "@actions/tool-cache": "^4.0.0",
-    "@sigstore/bundle": "^4.0.0",
+    "@sigstore/bundle": "^5.0.0",
     "@sigstore/sign": "^4.1.1",
     "@sigstore/tuf": "^5.0.0",
     "@sigstore/verify": "^3.1.1",

yarn.lock

@@ -468,7 +468,7 @@ __metadata:
     "@actions/io": "npm:^3.0.2"
     "@actions/tool-cache": "npm:^4.0.0"
     "@eslint/js": "npm:^9.39.3"
-    "@sigstore/bundle": "npm:^4.0.0"
+    "@sigstore/bundle": "npm:^5.0.0"
     "@sigstore/sign": "npm:^4.1.1"
     "@sigstore/tuf": "npm:^5.0.0"
     "@sigstore/verify": "npm:^3.1.1"
@@ -1337,6 +1337,15 @@ __metadata:
   languageName: node
   linkType: hard
 
+"@sigstore/bundle@npm:^5.0.0":
+  version: 5.0.0
+  resolution: "@sigstore/bundle@npm:5.0.0"
+  dependencies:
+    "@sigstore/protobuf-specs": "npm:^0.5.0"
+  checksum: 10/9d86dd7f8086832fff2a36ce84bd38a895fe951a8848963c1dddf1d0eb4d14394c94626fc53c4173f42be5ee8d7319b593ce3a77491e8b1497349c653decba90
+  languageName: node
+  linkType: hard
+
 "@sigstore/core@npm:^3.2.0, @sigstore/core@npm:^3.2.1":
   version: 3.2.1
   resolution: "@sigstore/core@npm:3.2.1"