chore(deps): Bump sigstore/gh-action-sigstore-python from 2.1.1 to 3.3.0 in the actions group

[dependabot]

Bumps the actions group with 1 update: sigstore/gh-action-sigstore-python.

Updates sigstore/gh-action-sigstore-python from 2.1.1 to 3.3.0

Release notes

Sourced from sigstore/gh-action-sigstore-python's releases.

v3.3.0

What's Changed

• Dependency updates. Most importantly used sigstore-python is now version 4.2.0

Full Changelog: sigstore/gh-action-sigstore-python@v3.2.0...v3.3.0

v3.2.0

gh-action-sigstore-python action now manages the used Python version internally, improving reliability.

Changed

• Manage Python version internally (#242, #258)
• Dependency updates

v3.1.0

gh-action-sigstore-python is now compatible with Rekor v2 transparency log (but produced signature bundles still contain Rekor v1 entries by default).

Changed

• The action now uses sigstore-python 4.1. All other dependencies are also updated (#220)

Fixed

• Fixed incompatibility with Python 3.14 by upgrading dependencies (#225)

Added

• rekor-version argument was added to control the Rekor transparency log version when signing. The default version in the gh-action-sigstore-python 3.x series will remain 1 (except when using staging: true). (#228)

v3.0.1

Changed

• The minimum Python version supported by this action is now 3.9 (#155)
• The action's Python dependencies are now fully pinned to specific versions (#165)

Fixed

• The rfc3161-client dependency has been upgraded to 1.0.3 to resolve a security vulnerability (#182)

v3.0.0

... (truncated)

Commits

• 04cffa1 build(deps): bump requests from 2.32.5 to 2.33.0 in /requirements (#342)
• 69171e8 build(deps): bump charset-normalizer in the python-dependencies group (#340)
• 40198d7 build(deps): bump github/codeql-action in the actions group (#338)
• ca55bb0 build(deps): bump the python-dependencies group with 2 updates (#339)
• 2736143 build(deps): bump the actions group with 3 updates (#335)
• 9afbb88 build(deps): bump pyasn1 from 0.6.2 to 0.6.3 in /requirements (#337)
• eb907b0 build(deps): bump pyopenssl from 25.3.0 to 26.0.0 in /requirements (#334)
• 84eaebf build(deps): bump astral-sh/setup-uv in the actions group (#331)
• 57c12be build(deps): bump charset-normalizer in the python-dependencies group (#332)
• 57918d7 build(deps): bump pyjwt from 2.11.0 to 2.12.0 in /requirements (#333)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[LalatenduMohanty]

@mergify rebase

[mergify]

rebase

✅ Branch has been successfully rebased

[LalatenduMohanty]

@rd4398 can you check if we need to change mergify settings to make sure PRs should be merged without merge commits.

[rd4398]

check if we need to change mergify settings to make sure PRs should be merged without merge commits.

Yes, @LalatenduMohanty I checked and opened #18 to fix the mergify settings