Update sigstore/sigstore-conformance action to v0.0.13

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
sigstore/sigstore-conformance	action	patch	v0.0.11 -> v0.0.13

---

Release Notes

sigstore/sigstore-conformance (sigstore/sigstore-conformance)

v0.0.13

Compare Source

What's Changed

• Add more hashedrekord tlog matching testcases by @​loosebazooka in https://github.com/sigstore/sigstore-conformance/pull/168
• Add a bundle test for a dsse envelope containing an in-toto statement by @​segiddins in https://github.com/sigstore/sigstore-conformance/pull/159
• test: don't assume GITHUB_WORKSPACE by @​woodruffw in https://github.com/sigstore/sigstore-conformance/pull/169
• add skip-cpython-release-tests by @​woodruffw in https://github.com/sigstore/sigstore-conformance/pull/170
• README: prep 0.0.13 by @​woodruffw in https://github.com/sigstore/sigstore-conformance/pull/171

Full Changelog: sigstore/sigstore-conformance@v0.0.12...v0.0.13

v0.0.12

Compare Source

What's Changed

• Don't require a GitHub token by @​jku in https://github.com/sigstore/sigstore-conformance/pull/134
• Add a .gitignore based on sigstore-python by @​segiddins in https://github.com/sigstore/sigstore-conformance/pull/137
• Add a test for verifying v0.3 bundles by @​segiddins in https://github.com/sigstore/sigstore-conformance/pull/138
• Add failure cases for checkpoints by @​loosebazooka in https://github.com/sigstore/sigstore-conformance/pull/139
• Capture stdout & stderr separately by @​segiddins in https://github.com/sigstore/sigstore-conformance/pull/135
• dev-requirements: enforce sigstore ~= 2.0 by @​woodruffw in https://github.com/sigstore/sigstore-conformance/pull/136
• Use .sigstore.json as bundle extension by @​loosebazooka in https://github.com/sigstore/sigstore-conformance/pull/142
• Isolate staging/production self tests from eachother by @​loosebazooka in https://github.com/sigstore/sigstore-conformance/pull/143
• Fix lint issues by @​jku in https://github.com/sigstore/sigstore-conformance/pull/147
• build(deps): bump requests from 2.31.0 to 2.32.0 by @​dependabot in https://github.com/sigstore/sigstore-conformance/pull/146
• dev-requirements: switch to sigstore-python 3.x by @​woodruffw in https://github.com/sigstore/sigstore-conformance/pull/152
• Cache ID token only as long as it is valid by @​segiddins in https://github.com/sigstore/sigstore-conformance/pull/154
• Support verifying digests in addition to artifacts by @​facutuesca in https://github.com/sigstore/sigstore-conformance/pull/158
• Conformance tests for CPython release signatures by @​woodruffw in https://github.com/sigstore/sigstore-conformance/pull/156
• Remove --verify-digest flag by @​loosebazooka in https://github.com/sigstore/sigstore-conformance/pull/162
• action: bump cpython-release-tracker ref by @​woodruffw in https://github.com/sigstore/sigstore-conformance/pull/160
• cli_protocol: clarify FILE_OR_DIGEST by @​woodruffw in https://github.com/sigstore/sigstore-conformance/pull/163
• Bump cpython artifacts by @​woodruffw in https://github.com/sigstore/sigstore-conformance/pull/164
• Test fail on mismatched hashrekord by @​loosebazooka in https://github.com/sigstore/sigstore-conformance/pull/166
• README: prep 0.0.12 by @​woodruffw in https://github.com/sigstore/sigstore-conformance/pull/167

New Contributors

• @​segiddins made their first contribution in https://github.com/sigstore/sigstore-conformance/pull/137
• @​loosebazooka made their first contribution in https://github.com/sigstore/sigstore-conformance/pull/139
• @​facutuesca made their first contribution in https://github.com/sigstore/sigstore-conformance/pull/158

Full Changelog: sigstore/sigstore-conformance@v0.0.11...v0.0.12

---

Configuration

📅 Schedule: Branch creation - "every 3 weeks on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.