Bump sigstore/gh-action-sigstore-python from 3.0.1 to 3.5.0

[dependabot]

Bumps sigstore/gh-action-sigstore-python from 3.0.1 to 3.5.0.

Release notes

Sourced from sigstore/gh-action-sigstore-python's releases.

v3.5.0

What's Changed

• The action now uses sigstore 4.5.0
• Bump other dependencies

Full Changelog: sigstore/gh-action-sigstore-python@v3.4.0...v3.5.0

v3.4.0

What's Changed

• Used sigstore package version is now 4.3.0
• Other dependency updates

Full Changelog: sigstore/gh-action-sigstore-python@v3.3.0...v3.4.0

v3.3.0

What's Changed

• Dependency updates. Most importantly used sigstore-python is now version 4.2.0

Full Changelog: sigstore/gh-action-sigstore-python@v3.2.0...v3.3.0

v3.2.0

gh-action-sigstore-python action now manages the used Python version internally, improving reliability.

Changed

• Manage Python version internally (#242, #258)
• Dependency updates

v3.1.0

gh-action-sigstore-python is now compatible with Rekor v2 transparency log (but produced signature bundles still contain Rekor v1 entries by default).

Changed

• The action now uses sigstore-python 4.1. All other dependencies are also updated (#220)

Fixed

• Fixed incompatibility with Python 3.14 by upgrading dependencies (#225)

Added

• rekor-version argument was added to control the Rekor transparency log version when signing. The default version in the gh-action-sigstore-python 3.x series will remain 1 (except when using staging: true). (#228)

Commits

• 790bc6b build(deps): bump github/codeql-action/upload-sarif in the actions group (#445)
• 513a149 build(deps): bump platformdirs in the python-dependencies group (#446)
• 74e0040 Bump sigstore from 4.4 to 4.5 (#444)
• 52538fd build(deps): bump the actions group across 1 directory with 4 updates (#439)
• cbab91d build(deps): bump the python-dependencies group across 1 directory with 9 upd...
• 1d3524c build(deps): bump softprops/action-gh-release from 3.0.1 to 3.0.2 in the acti...
• a174484 build(deps): bump sigstore from 4.3.0 to 4.4.0 in the python-dependencies gro...
• 0b384a6 build(deps): bump the actions group with 2 updates (#429)
• f11d8f8 build(deps): bump typing-extensions in the python-dependencies group (#430)
• 258577b build(deps): bump the python-dependencies group with 2 updates (#428)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[codecov-commenter]

⚠️ Please install the to ensure uploads and comments are reliably processed by Codecov.

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 99.87%. Comparing base (503f0bb) to head (056a340).
❗ Your organization needs to install the Codecov GitHub app to enable full functionality.

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #194      +/-   ##
==========================================
- Coverage   99.90%   99.87%   -0.03%     
==========================================
  Files          97       97              
  Lines        7326     7326              
  Branches     1331     1331              
==========================================
- Hits         7319     7317       -2     
- Misses          3        5       +2     
  Partials        4        4              

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.