[elastic-renovate-prod]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/sigstore/protobuf-specs	v0.5.1 → v0.5.2
github.com/sigstore/rekor	v1.5.3 → v1.5.4

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

sigstore/protobuf-specs (github.com/sigstore/protobuf-specs)

v0.5.2

Compare Source

• Add monitor configuration protobuf definition (#​907)
• Add custom java_package to envelope.proto (#​923)

sigstore/rekor (github.com/sigstore/rekor)

v1.5.4

Compare Source

Features

• search: add subject field for SAN-based lookup (#​2850)
• Change default CLI upload type to hashedrekord (#​2885)
• separate read/write sql traffic for indexservice into separate pools (#​2914)

Bug Fixes

• better handle connection issues (#​2931)
• fix pprof arg (#​2932)
• fix shadowed err, wrong err label (#​2907)
• alpine: hash only the bytes read when computing the control.tar.gz digest (#​2908)
• return a 400 error for invalid TreeID (#​2895)
• Return the file error instead of the URL error for a missing artifact path (#​2872)
• Apply proactive hardening against malformed requests (#​2945)

Improvements

• remove repetitive viper lookups from api endpoints (#​2922)
• move CI containers to GHCR (#​2943)
• remove unused semver type version map (#​2918)
• test against valkey (#​2916)
• Remove unmaintained scripts/createdb.sh dev helper (#​2905)
• test mysql with production dsn strings (#​2906)
• create interface for TrillianClient (#​2896)
• use more efficient table schema for indexes (#​2903)
• Migrate off deprecated golang.org/x/crypto/openpgp (#​2883)
• minimize duplicative JSON parsing while handling entries (#​2880)
• remove duplicative log entry (#​2881)
• optimize DSSE memory and cpu while parsing and verifying envs (#​2879)
• update builder to use go1.26.4 (#​2873)
• upgrade grpc-ecosystem/go-grpc-middleware to v2 (#​2921)
• Migrate gopkg.in/yaml.v2 to sigs.k8s.io/yaml (#​2919)
• numerous upgraded dependencies

Documentation

• docs(cli): add usage examples to rekor-cli commands (#​2851)

Contributors

• ahmagdyfb
• Bob Callaway
• Carlos Tadeu Panato Junior
• Chiman Jain
• Hayden
• Jason Hall
• Nikhil J
• Ogulcan Aydogan
• Pujitha Paladugu
• Sueun Cho

---

Configuration

📅 Schedule: Branch creation - Between 01:00 AM and 01:59 AM, Monday through Friday ( * 1 * * 1-5 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[mergify]

Tick the box to add this pull request to the merge queue (same as @mergifyio queue).

• Queue this pull request