deps(deps): update module github.com/sigstore/sigstore to v1.8.12

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
github.com/sigstore/sigstore	v1.8.11 -> v1.8.12

---

Release Notes

sigstore/sigstore (github.com/sigstore/sigstore)

v1.8.12

Compare Source

What's Changed

• build(deps): Bump google.golang.org/api from 0.210.0 to 0.212.0 in /pkg/signature/kms/gcp by @​dependabot in https://github.com/sigstore/sigstore/pull/1912
• build(deps): Bump google.golang.org/protobuf from 1.35.2 to 1.36.0 in /pkg/signature/kms/gcp by @​dependabot in https://github.com/sigstore/sigstore/pull/1911
• build(deps): Bump actions/setup-go from 5.1.0 to 5.2.0 in the all group by @​dependabot in https://github.com/sigstore/sigstore/pull/1909
• build(deps): Bump google.golang.org/api from 0.212.0 to 0.214.0 in /pkg/signature/kms/gcp by @​dependabot in https://github.com/sigstore/sigstore/pull/1917
• build(deps): Bump hashicorp/vault from 1.18.2 to 1.18.3 in /test/e2e in the all group by @​dependabot in https://github.com/sigstore/sigstore/pull/1915
• build(deps): Bump the gomod group across 2 directories with 5 updates by @​dependabot in https://github.com/sigstore/sigstore/pull/1916
• build(deps): Bump cloud.google.com/go/kms from 1.20.3 to 1.20.4 in /pkg/signature/kms/gcp in the gomod group across 1 directory by @​dependabot in https://github.com/sigstore/sigstore/pull/1920
• build(deps): Bump github.com/coreos/go-oidc/v3 from 3.11.0 to 3.12.0 by @​dependabot in https://github.com/sigstore/sigstore/pull/1924
• build(deps): Bump golang.org/x/oauth2 from 0.24.0 to 0.25.0 by @​dependabot in https://github.com/sigstore/sigstore/pull/1921
• build(deps): Bump golang.org/x/term from 0.27.0 to 0.28.0 by @​dependabot in https://github.com/sigstore/sigstore/pull/1922
• build(deps): Bump golang.org/x/crypto from 0.31.0 to 0.32.0 by @​dependabot in https://github.com/sigstore/sigstore/pull/1923
• build(deps): Bump golang.org/x/crypto from 0.28.0 to 0.31.0 in /test/fuzz by @​dependabot in https://github.com/sigstore/sigstore/pull/1908
• build(deps): Bump github.com/secure-systems-lab/go-securesystemslib from 0.8.0 to 0.9.0 by @​dependabot in https://github.com/sigstore/sigstore/pull/1910
• build(deps): Bump the tools group across 1 directory with 2 updates by @​dependabot in https://github.com/sigstore/sigstore/pull/1913
• cleanup ci by @​cpanato in https://github.com/sigstore/sigstore/pull/1927

Full Changelog: sigstore/sigstore@v1.8.11...v1.8.12

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 5 additional dependencies were updated

Details:

Package	Change
github.com/secure-systems-lab/go-securesystemslib	v0.8.0 -> v0.9.0
golang.org/x/crypto	v0.31.0 -> v0.32.0
golang.org/x/oauth2	v0.24.0 -> v0.25.0
golang.org/x/sys	v0.28.0 -> v0.29.0
golang.org/x/term	v0.27.0 -> v0.28.0

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

@@           Coverage Diff           @@
##             main     #355   +/-   ##
=======================================
  Coverage   43.39%   43.39%           
=======================================
  Files           9        9           
  Lines         848      848           
=======================================
  Hits          368      368           
  Misses        450      450           
  Partials       30       30           

---

Continue to review full report in Codecov by Sentry.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 973fc68...0157ed9. Read the comment docs.