[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
dev.sigstore:sigstore-maven-plugin	2.3.0 → 2.4.0

---

Release Notes

sigstore/sigstore-java (dev.sigstore:sigstore-maven-plugin)

v2.4.0

Compare Source

See CHANGELOG.md for more details.

What's Changed

• Update after v2.3.0 by @​loosebazooka in #​1286
• Update com.diffplug.spotless to v8.10.3 by @​renovate[bot] in #​1291
• Update dependency org.slf4j:slf4j-simple to v2.0.20 by @​renovate[bot] in #​1292
• Update dependency com.gradle.plugin-publish:com.gradle.plugin-publish.gradle.plugin to v2.2.1 by @​renovate[bot] in #​1293
• Update dependency de.thetaphi.forbiddenapis:de.thetaphi.forbiddenapis.gradle.plugin to v3.11 by @​renovate[bot] in #​1294
• Update dependency go to 1.27.x by @​renovate[bot] in #​1295
• Update dependency org.apache.maven.plugin-tools:maven-plugin-annotations to v3.16.0 by @​renovate[bot] in #​1296
• fix fuzzing crash during handling parsing malformed strings by @​bobcallaway in #​1298
• test: use staging instance for RekorClientHttpTest by @​aaronlew02 in #​1301
• Add git sign off config to renovate.json by @​loosebazooka in #​1308
• Update com.diffplug.spotless to v8.10.4 by @​renovate-bot in #​1303
• Update org.bouncycastle to v1.86 by @​renovate-bot in #​1311
• Update Gradle to v9.8.1 by @​renovate-bot in #​1309
• Update org.immutables to v2.12.3 by @​renovate-bot in #​1306
• Update org.apache.maven to v3.10.0 by @​renovate-bot in #​1310
• Update dependency org.eclipse.jetty:jetty-server to v12.1.14 by @​renovate-bot in #​1305
• Update dependency com.google.guava:guava to v33.7.2-jre by @​renovate-bot in #​1304
• Update dependency org.mockito:mockito-bom to v5.24.0 by @​renovate-bot in #​1307
• Tighten up inclusion/checkpoint processing by @​loosebazooka in #​1300
• refactor: create dedicated TufGsonSupplier by @​aaronlew02 in #​1287
• Update protobuf_grpc by @​renovate-bot in #​1312
• Update actions/setup-java action to v6 by @​renovate-bot in #​1314
• Update actions/upload-artifact action to v7.0.2 by @​renovate-bot in #​1302
• Update dependency no.nav.security:mock-oauth2-server to v6 by @​renovate-bot in #​1316
• fix: check Rekor log validity at SET integrated time by @​aaronlew02 in #​1299
• Update gradle/actions action to v6 by @​renovate-bot in #​1320
• Update Gradle to v9.8.2 by @​renovate-bot in #​1319
• Move from maven-verifier to maven-executor by @​loosebazooka in #​1321

New Contributors

• @​renovate-bot made their first contribution in #​1303

Full Changelog: sigstore/sigstore-java@v2.3.0...v2.4.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 87.60%. Comparing base (6211623) to head (85409ad).
✅ All tests successful. No failed tests found.

Additional details and impacted files

@@             Coverage Diff              @@
##               main     #939      +/-   ##
============================================
+ Coverage     87.19%   87.60%   +0.41%     
  Complexity     1284     1284              
============================================
  Files            51       51              
  Lines          4131     4131              
  Branches        569      569              
============================================
+ Hits           3602     3619      +17     
+ Misses          309      292      -17     
  Partials        220      220              

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.