[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/sigstore/rekor-tiles/v2	v2.3.0 → v2.4.1

---

Release Notes

sigstore/rekor-tiles (github.com/sigstore/rekor-tiles/v2)

v2.4.1

Compare Source

What's Changed

• Bump sigstore/sigstore to support ML-DSA Tink keysets in #​1047

Full Changelog: sigstore/rekor-tiles@v2.4.0...v2.4.1

v2.4.0

Compare Source

What's Changed

v2.4.0 implements a new leaf type and adds support for ML-DSA signatures, as outlined in https://blog.sigstore.dev/pqc-sigstore/. This feature is very much experimental and should not be used in a production environment yet.

• Reject pure Ed25519 in hashedrekord instead of panicking in #​872
• Add Identity-based Transparency Logging API and server stub in #​871
• Fix inverted description for --read-only flag in #​901
• Use only one Dockerfile for builds, update Go version in #​926
• Remove pure Ed25519 and restrict allowed signature algorithms in #​927
• Add go metrics collectors to server metrics in #​937
• make idle timeout for http keepalive configurable in #​960
• client: add WithTransport option for a custom base RoundTripper in #​951
• *-compose.yml: Switch registry for minio in #​972
• Registrar interface for service registration in #​974
• Use platform appropriate base image in #​992
• Deduplicate the AWS and GCP signer-verifiers in #​925
• Validate that hashedrekord key_details matches the verifier's public key in #​993
• Move context field into PublicKeyCredential in identity proto in #​1034
• Add serve-identity subcommand and identity algorithm registry in #​1033
• Implement Identity-based Transparency Logging in #​828
• OIDC credential support for Identity TLog in #​830
• Add ML-DSA-44 support for public key credential in #​837
• Support ML-DSA for checkpoint signature in #​879
• Add GCP backend support for identity log in #​1035
• Base64-encode all values, for both credential formats in #​1041
• Bump Go builder to 1.27.3, update Distroless base image in #​1042

Full Changelog: sigstore/rekor-tiles@v2.3.0...v2.4.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 2 additional dependencies were updated
• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.27 -> 1.27.0
github.com/sigstore/sigstore	v1.11.1 -> v1.11.2
github.com/sigstore/sigstore-go	v1.3.0 -> v1.4.0