chore(deps): update sigstore package dependencies

[renovate]

This PR contains the following updates:

Package	Update	Change
curlimages/curl	minor	8.9.1 -> 8.10.1
docker.io/curlimages/curl	minor	8.9.1 -> 8.10.1
docker.io/openbao/openbao	patch	2.0.0 -> 2.0.2
gcr.io/projectsigstore/fulcio	minor	v1.5.1 -> v1.6.5
ghcr.io/sigstore/helm-charts/ctlog	patch	0.2.55 -> 0.2.57
ghcr.io/sigstore/helm-charts/rekor (source)	minor	1.4.7 -> 1.5.1
ghcr.io/sigstore/helm-charts/trillian (source)	patch	0.2.26 -> 0.2.28
ghcr.io/sigstore/helm-charts/tsa	patch	1.0.5 -> 1.0.6
ghcr.io/sigstore/helm-charts/tuf (source)	patch	0.1.16 -> 0.1.19
ghcr.io/sigstore/scaffolding/createcerts	patch	v0.7.5 -> v0.7.13
ghcr.io/sigstore/scaffolding/createctconfig	patch	v0.7.5 -> v0.7.13
ghcr.io/sigstore/scaffolding/createtree	patch	v0.7.5 -> v0.7.13
ghcr.io/sigstore/scaffolding/ct_server	patch	v0.7.5 -> v0.7.13
ghcr.io/sigstore/scaffolding/server	patch	v0.7.5 -> v0.7.13
ghcr.io/sigstore/scaffolding/trillian_log_server	patch	v1.6.0 -> v1.6.1
ghcr.io/sigstore/scaffolding/trillian_log_signer	patch	v1.6.0 -> v1.6.1
ghcr.io/sigstore/timestamp-server	patch	v1.2.2 -> v1.2.3
openbao	minor	0.4.0 -> 0.6.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

curl/curl-container (curlimages/curl)

v8.10.1

Compare Source

Changed

• bump to curl 8.10.1

v8.10.0

Compare Source

Changed

• bump to curl 8.10.0
• bump to alpine:3.20.3

openbao/openbao (docker.io/openbao/openbao)

v2.0.2

Compare Source

Note:

• This release does not ship with the UI enabled. The UI will be available in the future. #​129
• OpenBao does not provide support for Vault Enterprise features. If there is an enterprise feature you would like to see added to the project, please open a feature request.
• OpenBao is fully API compatible with Vault 1.14.9, and seal compatible with the plugins the project supports. Plugin support for OpenBao can be found here.

Changelog

• f4a5e78: Bump to go 1.22.8 (#​588) (@​cipherboy)
• 372d0b6: Correctly handle IPv6 for HTTP-01 (#​559) (@​cipherboy)
• e426bb6: Deny empty valid_principals during SSH issuance (#​561) (@​cipherboy )
• 1e52cfa: Fix aliasNameFromLoginRequest panic (#​512) (@​cipherboy )
• 2ce2e84: Fix k8s registration variables (#​527) (@​cipherboy )
• 500d2a2: add vault symlink to Docker images (#​548) (@​JanMa)
• 2bd8a0a: fix command vault print token to bao print token in curl string generated by buildCurlString() (#​511) (@​Btijmen )
• d7abf40: release: v2.0.2 (#​586) (@​JanMa)
• 96853bb: use correct Alpine version (#​589) (@​cipherboy)

v2.0.1

Compare Source

2.0.1

sigstore/scaffolding (ghcr.io/sigstore/helm-charts/tuf)

v0.1.19

Compare Source

Stop releasing ARM artifacts as they are no longer necessary.

v0.1.18

Compare Source

Use the CI version of the trillian db which has schema already in it, so no need for createdb job anymore.

v0.1.17

Compare Source

Add more configurability.

openbao/openbao-helm (openbao)

v0.6.0

Compare Source

Features:

• Added extraInitContainers to define init containers for the Vault cluster GH-258
• Added postStart lifecycle hook allowing users to configure commands to run on the Vault pods after they're ready GH-315
• Beta: Added OpenShift support GH-319

Improvements:

• Server configs can now be defined in YAML. Multi-line string configs are still compatible GH-213
• Removed IPC_LOCK privileges since swap is disabled on containers [GH-198]
• Use port names that map to vault.scheme [GH-223]
• Allow both yaml and multi-line string annotations [GH-272]
• Added configurable to set the Raft node name to hostname [GH-269]
• Support setting priorityClassName on pods [GH-282]
• Added support for ingress apiVersion networking.k8s.io/v1beta1 [GH-310]
• Added configurable to change service type for the HA active service GH-317

Bugs:

• Fixed default ingress path [GH-224]
• Fixed annotations for HA standby/active services [GH-268]
• Updated some value defaults to match their use in templates [GH-309]
• Use active service on ingress when ha [GH-270]
• Fixed bug where pull secrets weren't being used for injector image GH-298

v0.5.1

Compare Source

Official OpenBao Chart

What's Changed

• Use the CSI agent image registry from configuration by @​thefinn93 in https://github.com/openbao/openbao-helm/pull/17

New Contributors

• @​thefinn93 made their first contribution in https://github.com/openbao/openbao-helm/pull/17

Full Changelog: openbao/openbao-helm@openbao-0.5.0...openbao-0.5.1

v0.5.0

Compare Source

Features:

• Added Raft support for HA mode [GH-228]

• Now supports Vault Enterprise [GH-250]

• Added K8s Service Registration for HA modes [GH-250]

• Option to set AGENT_INJECT_VAULT_AUTH_PATH for the injector [GH-185]

• Added environment variables for logging and revocation on Vault Agent Injector [GH-219]

• Option to set environment variables for the injector deployment [GH-232]

• Added affinity, tolerations, and nodeSelector options for the injector deployment [GH-234]

• Made all annotations multi-line strings [GH-227]

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.