chore(deps): update module github.com/sigstore/cosign/v2 to v2.4.2

[renovate-rancher]

This PR contains the following updates:

Package	Type	Update	Change
github.com/sigstore/cosign/v2	require	patch	v2.4.1 -> v2.4.2

---

Release Notes

sigstore/cosign (github.com/sigstore/cosign/v2)

v2.4.2

Compare Source

Features

• Updated open-policy-agent to 1.1.0 library (#​4036)
  • Note that only Rego v0 policies are supported at this time
• Add UseSignedTimestamps to CheckOpts, refactor TSA options (#​4006)
• Add support for verifying root checksum in cosign initialize (#​3953)
• Detect if user supplied a valid protobuf bundle (#​3931)
• Add a log message if user doesn't provide --trusted-root (#​3933)
• Support mTLS towards container registry (#​3922)
• Add bundle create helper command (#​3901)
• Add trusted-root create helper command (#​3876)

Bug Fixes

• fix: set tls config while retaining other fields from default http transport (#​4007)
• policy fuzzer: ignore known panics (#​3993)
• Fix for multiple WithRemote options (#​3982)
• Add nightly conformance test workflow (#​3979)
• Fix copy --only for signatures + update/align docs (#​3904)

Documentation

• Remove usage.md from spec, point to client spec (#​3918)
• move reference from gcr to ghcr (#​3897)

Contributors

• AdamKorcz
• Aditya Sirish
• Bob Callaway
• Carlos Tadeu Panato Junior
• Cody Soyland
• Colleen Murphy
• Hayden B
• Jussi Kukkonen
• Marco Franssen
• Nianyu Shen
• Slavek Kabrda
• Søren Juul
• Warren Hodgkinson
• Zach Steindler

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[renovate-rancher]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 52 additional dependencies were updated
• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.23.5 -> 1.23.6
cuelabs.dev/go/oci/ociregistry	v0.0.0-20240404174027-a39bec0462d2 -> v0.0.0-20241125120445-2c00c104c6e1
cuelang.org/go	v0.9.2 -> v0.12.0
github.com/Azure/go-ansiterm	v0.0.0-20230124172434-306776ec8161 -> v0.0.0-20250102033503-faa5f7b0171c
github.com/agnivade/levenshtein	v1.1.1 -> v1.2.0
github.com/aws/aws-sdk-go-v2	v1.32.8 -> v1.34.0
github.com/aws/aws-sdk-go-v2/config	v1.28.10 -> v1.29.2
github.com/aws/aws-sdk-go-v2/credentials	v1.17.51 -> v1.17.55
github.com/aws/aws-sdk-go-v2/feature/ec2/imds	v1.16.23 -> v1.16.25
github.com/aws/aws-sdk-go-v2/internal/configsources	v1.3.27 -> v1.3.29
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2	v2.6.27 -> v2.6.29
github.com/aws/aws-sdk-go-v2/internal/ini	v1.8.1 -> v1.8.2
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding	v1.12.1 -> v1.12.2
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url	v1.12.8 -> v1.12.10
github.com/aws/aws-sdk-go-v2/service/sso	v1.24.9 -> v1.24.12
github.com/aws/aws-sdk-go-v2/service/ssooidc	v1.28.8 -> v1.28.11
github.com/aws/aws-sdk-go-v2/service/sts	v1.33.6 -> v1.33.10
github.com/aws/smithy-go	v1.22.1 -> v1.22.2
github.com/buildkite/agent/v3	v3.81.0 -> v3.91.0
github.com/buildkite/go-pipeline	v0.13.1 -> v0.13.3
github.com/buildkite/interpolate	v0.1.3 -> v0.1.5
github.com/buildkite/roko	v1.2.0 -> v1.3.1
github.com/containerd/containerd	v1.7.24 -> v1.7.25
github.com/emicklei/proto	v1.12.1 -> v1.13.4
github.com/mitchellh/mapstructure	v1.5.0 -> v1.5.1-0.20231216201459-8508981c8b6c
github.com/moby/term	v0.5.0 -> v0.5.2
github.com/open-policy-agent/opa	v0.68.0 -> v1.1.0
github.com/protocolbuffers/txtpbfmt	v0.0.0-20231025115547-084445ff1adf -> v0.0.0-20241112170944-20d2c9ebc01d
github.com/rogpeppe/go-internal	v1.13.1 -> v1.13.2-0.20241226121412-a5dc8ff20d0a
github.com/sigstore/protobuf-specs	v0.3.2 -> v0.4.0
github.com/sigstore/rekor	v1.3.6 -> v1.3.9
github.com/sigstore/sigstore-go	v0.6.2 -> v0.7.0
github.com/sigstore/timestamp-authority	v1.2.2 -> v1.2.4
github.com/spf13/pflag	v1.0.5 -> v1.0.6
github.com/spiffe/go-spiffe/v2	v2.4.0 -> v2.5.0
github.com/tchap/go-patricia/v2	v2.3.1 -> v2.3.2
github.com/theupdateframework/go-tuf/v2	v2.0.1 -> v2.0.2
github.com/zeebo/errs	v1.3.0 -> v1.4.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp	v0.58.0 -> v0.59.0
go.opentelemetry.io/otel	v1.33.0 -> v1.34.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace	v1.32.0 -> v1.34.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc	v1.32.0 -> v1.34.0
go.opentelemetry.io/otel/metric	v1.33.0 -> v1.34.0
go.opentelemetry.io/otel/sdk	v1.33.0 -> v1.34.0
go.opentelemetry.io/otel/sdk/metric	v1.31.0 -> v1.32.0
go.opentelemetry.io/otel/trace	v1.33.0 -> v1.34.0
go.opentelemetry.io/proto/otlp	v1.3.1 -> v1.5.0
google.golang.org/api	v0.217.0 -> v0.219.0
google.golang.org/genproto/googleapis/api	v0.0.0-20241219192143-6b3ec007d9bb -> v0.0.0-20250115164207-1a7da9e5054f
google.golang.org/genproto/googleapis/rpc	v0.0.0-20250106144421-5f5ef82da422 -> v0.0.0-20250124145028-65684f501c47
google.golang.org/grpc	v1.69.4 -> v1.70.0
google.golang.org/protobuf	v1.36.3 -> v1.36.4
sigs.k8s.io/release-utils	v0.9.0 -> v0.11.0