build(deps): bump sigstore in the python-dependencies group

dependabot[bot] · web-flow · commit f1ce368c6bbf · 2026-06-10T20:15:36.000Z
Bumps the python-dependencies group with 1 update: [sigstore](https://github.com/sigstore/sigstore-python). Updates `sigstore` from 4.2.0 to 4.3.0 - [Release notes](https://github.com/sigstore/sigstore-python/releases) - [Changelog](https://github.com/sigstore/sigstore-python/blob/main/CHANGELOG.md) - [Commits](sigstore/sigstore-python@v4.2.0...v4.3.0) --- updated-dependencies: - dependency-name: sigstore dependency-version: 4.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
diff --git a/requirements/dev.in b/requirements/dev.in
@@ -3,5 +3,5 @@ mypy
 types-requests
 
 # copied from main.in
-sigstore ~= 4.2
+sigstore ~= 4.3
 requests ~= 2.34
diff --git a/requirements/dev.txt b/requirements/dev.txt
@@ -918,9 +918,9 @@ securesystemslib==1.4.0 \
     --hash=sha256:a0743a3d978cf26e98a70a57e3fbd5a18e0a74c20cabe615f6a55b02ef0272b3 \
     --hash=sha256:faea87be0f9c4b4277a5fa1b54bf9bfd807be9a94ab11be6c557dc8b75c43285
     # via tuf
-sigstore==4.2.0 \
-    --hash=sha256:bdbb49a42fd5f0ea6765919adb42ccee7254c482330764d0842eec4e11ad78d7 \
-    --hash=sha256:ed2e0f50aae85148a8aa4fc0f57c298927fce430ad1f988f38611ce90c85829f
+sigstore==4.3.0 \
+    --hash=sha256:0f60c46c92fd4e871fbec979c9ae2aa381d7a93fbb774e49c9964550e5e16856 \
+    --hash=sha256:3c4b566bddfcc53e73d3adc06acf4311d72be0d907a167133abdc815a472a59b
     # via -r requirements/dev.in
 sigstore-models==0.0.6 \
     --hash=sha256:5201a68f4d7d0f8bec1e2f4378eb646b084c52609a4e31db8c385095fff68b2e \
diff --git a/requirements/main.in b/requirements/main.in
@@ -1,2 +1,2 @@
-sigstore ~= 4.2
+sigstore ~= 4.3
 requests ~= 2.34
diff --git a/requirements/main.txt b/requirements/main.txt
@@ -666,9 +666,9 @@ securesystemslib==1.4.0 \
     --hash=sha256:a0743a3d978cf26e98a70a57e3fbd5a18e0a74c20cabe615f6a55b02ef0272b3 \
     --hash=sha256:faea87be0f9c4b4277a5fa1b54bf9bfd807be9a94ab11be6c557dc8b75c43285
     # via tuf
-sigstore==4.2.0 \
-    --hash=sha256:bdbb49a42fd5f0ea6765919adb42ccee7254c482330764d0842eec4e11ad78d7 \
-    --hash=sha256:ed2e0f50aae85148a8aa4fc0f57c298927fce430ad1f988f38611ce90c85829f
+sigstore==4.3.0 \
+    --hash=sha256:0f60c46c92fd4e871fbec979c9ae2aa381d7a93fbb774e49c9964550e5e16856 \
+    --hash=sha256:3c4b566bddfcc53e73d3adc06acf4311d72be0d907a167133abdc815a472a59b
     # via -r requirements/main.in
 sigstore-models==0.0.6 \
     --hash=sha256:5201a68f4d7d0f8bec1e2f4378eb646b084c52609a4e31db8c385095fff68b2e \

Original file line number	Diff line number	Diff line change
`@@ -1,2 +1,2 @@`
`1`		`-sigstore ~= 4.2`
	`1`	`+sigstore ~= 4.3`
`2`	`2`	`requests ~= 2.34`