chore(deps): update rust crate sigstore to 0.14

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
sigstore	workspace.dependencies	minor	0.13 → 0.14

---

Release Notes

sigstore/sigstore-rs (sigstore)

v0.14.0

Compare Source

What's Changed

• build(deps): bump rust-lang/crates-io-auth-action from 1.0.1 to 1.0.2 by @​dependabot[bot] in #​507
• build(deps): bump taiki-e/install-action from 2.62.31 to 2.62.33 by @​dependabot[bot] in #​506
• build(deps): bump taiki-e/install-action from 2.62.33 to 2.62.39 by @​dependabot[bot] in #​512
• Pin Rust toolchain to 1.89.0 for consistent builds by @​wolfv in #​515
• build(deps): bump taiki-e/install-action from 2.62.39 to 2.62.45 by @​dependabot[bot] in #​517
• build(deps): update dtolnay/rust-toolchain requirement to 351f82a by @​dependabot[bot] in #​516
• Replace json-syntax with serde_json_canonicalizer by @​HastD in #​511
• chore: replace olpc-cjson with serde_json_canonicalizer by @​HastD in #​521
• build(deps): bump taiki-e/install-action from 2.62.45 to 2.62.52 by @​dependabot[bot] in #​529
• build(deps): bump actions/checkout from 5.0.0 to 5.0.1 by @​dependabot[bot] in #​528
• ci: add Zizmor, apply security recommendations by @​HastD in #​519
• build(deps): bump rust-lang/crates-io-auth-action from 1.0.2 to 1.0.3 by @​dependabot[bot] in #​523
• chore: remove ring dependency by @​wolfv in #​520
• chore: remove unused getrandom by @​wolfv in #​524
• build(deps): update testcontainers requirement from 0.25 to 0.26 by @​dependabot[bot] in #​537
• build(deps): bump zizmorcore/zizmor-action from 0.2.0 to 0.4.1 by @​dependabot[bot] in #​542
• build(deps): bump actions/checkout from 5.0.0 to 6.0.2 by @​dependabot[bot] in #​541
• build(deps): bump Swatinem/rust-cache from 2.8.1 to 2.8.2 by @​dependabot[bot] in #​536
• feat: load trusted roots from TrustClientConfig. by @​jvanz in #​532
• Merkle tree proof implementation by @​vembacher in #​285
• build(deps): update hex-literal requirement from 0.4 to 1.1 by @​dependabot[bot] in #​544
• build(deps): bump zizmorcore/zizmor-action from 0.4.1 to 0.5.0 by @​dependabot[bot] in #​545
• build(deps): update testcontainers requirement from 0.26 to 0.27 by @​dependabot[bot] in #​548
• fix(cosign): parse Ed25519 Rekor keys when building client from upstream TUF root by @​jvanz in #​551
• build(deps): bump rust-lang/crates-io-auth-action from 1.0.3 to 1.0.4 by @​dependabot[bot] in #​555
• build(deps): bump Swatinem/rust-cache from 2.8.2 to 2.9.1 by @​dependabot[bot] in #​554
• build(deps): bump zizmorcore/zizmor-action from 0.5.0 to 0.5.2 by @​dependabot[bot] in #​552
• build(deps): update cached requirement from 0.56 to 0.59 by @​dependabot[bot] in #​556
• build(deps): update tough requirement from 0.21 to 0.22 by @​dependabot[bot] in #​565
• build(deps): bump taiki-e/install-action from 2.62.52 to 2.75.23 by @​dependabot[bot] in #​564
• build(deps): bump zizmorcore/zizmor-action from 0.5.2 to 0.5.3 by @​dependabot[bot] in #​561
• build(deps): update reqwest requirement from 0.12 to 0.13 by @​dependabot[bot] in #​540
• deps: Bump rust toolchain to 1.95.0 by @​viccuad in #​566
• feat!: Drop rust crypto & wasm target, align with Sigstore algs by @​flavio in #​571
• build(deps): bump taiki-e/install-action from 2.75.23 to 2.77.6 by @​dependabot[bot] in #​573
• build(deps): update dtolnay/rust-toolchain requirement to e081816 by @​dependabot[bot] in #​568
• refactor: remove wasm workarounds by @​flavio in #​574
• feat!: cosign v3 signature verification by @​flavio in #​572
• chore: prepare 0.14 release by @​flavio in #​575

New Contributors

• @​wolfv made their first contribution in #​515
• @​HastD made their first contribution in #​511

Full Changelog: sigstore/sigstore-rs@v0.13.0...v0.14.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: Cargo.lock

Command failed: cargo update --config net.git-fetch-with-cli=true --manifest-path Cargo.toml --workspace
    Updating crates.io index
error: failed to select a version for `sigstore`.
    ... required by package `pdf-sign-sigstore v0.2.0 (/tmp/renovate/repos/github/0x77dev/pdf-sign/crates/sigstore)`
versions that meet the requirements `^0.14` are: 0.14.0

package `pdf-sign-sigstore` depends on `sigstore` with feature `rustls-tls-native-roots` but `sigstore` does not have that feature.
help: available features: bundle, cached-client, cert, cosign, default, fulcio, full, mock-client, native-tls, oauth, registry, rekor, rustls-tls, sign, sigstore-trust-root, test-registry, test-remote-registry, verify


failed to select a version for `sigstore` which could resolve this conflict