v0.15.0

What's Changed

• Update Go to v1.25.0 by @malancas in #1917
• fix: update expired TUF test data by @0xiso in #1920
• chore(deps): Bump actions/github-script from 7.0.1 to 8.0.0 by @dependabot[bot] in #1908
• chore(deps): Bump actions/setup-go from 5.5.0 to 6.1.0 by @dependabot[bot] in #1904
• chore(deps): Bump golangci/golangci-lint-action from 8.0.0 to 9.2.0 by @dependabot[bot] in #1913
• chore(deps): Bump the minor-patch group across 1 directory with 6 updates by @dependabot[bot] in #1921
• chore(deps): Bump actions/cache from 4.3.0 to 5.0.3 by @dependabot[bot] in #1930
• chore(deps): Bump actions/upload-artifact from 5.0.0 to 6.0.0 by @dependabot[bot] in #1929
• chore(deps): Bump the minor-patch group with 4 updates by @dependabot[bot] in #1928
• chore(deps): Bump the minor-patch group with 3 updates by @dependabot[bot] in #1931
• chore(deps): Bump github.com/cloudflare/circl from 1.6.1 to 1.6.3 by @dependabot[bot] in #1937
• chore(deps): Upgrade cosign v2 to v3 and update sigstore deps by @k4leung4 in #1944
• Log image reference when no-match-policy is set to warn or deny by @falcorocks in #1941
• chore(deps): Migrate go-tuf from v1 to v2 by @k4leung4 in #1945
• chore(deps): Bump the minor-patch group across 1 directory with 7 updates by @dependabot[bot] in #1946
• chore(deps): Bump goreleaser/goreleaser-action from 6.4.0 to 7.0.0 by @dependabot[bot] in #1951
• chore(deps): Bump the minor-patch group with 3 updates by @dependabot[bot] in #1949
• chore(deps): Bump imranismail/setup-kustomize from 2.1.0 to 3.0.0 by @dependabot[bot] in #1950

Full Changelog: v0.14.0...v0.15.0