build(deps): bump sigstore/gh-action-sigstore-python from 3.2.0 to 3.3.0

[dependabot]

Bumps sigstore/gh-action-sigstore-python from 3.2.0 to 3.3.0.

Release notes

Sourced from sigstore/gh-action-sigstore-python's releases.

v3.3.0

What's Changed

• Dependency updates. Most importantly used sigstore-python is now version 4.2.0

Full Changelog: sigstore/gh-action-sigstore-python@v3.2.0...v3.3.0

Changelog

Sourced from sigstore/gh-action-sigstore-python's changelog.

Changelog

All notable changes to gh-action-sigstore-python will be documented in this file.

The format is based on Keep a Changelog.

All versions prior to 3.0.0 are untracked.

[Unreleased]

Commits

• 04cffa1 build(deps): bump requests from 2.32.5 to 2.33.0 in /requirements (#342)
• 69171e8 build(deps): bump charset-normalizer in the python-dependencies group (#340)
• 40198d7 build(deps): bump github/codeql-action in the actions group (#338)
• ca55bb0 build(deps): bump the python-dependencies group with 2 updates (#339)
• 2736143 build(deps): bump the actions group with 3 updates (#335)
• 9afbb88 build(deps): bump pyasn1 from 0.6.2 to 0.6.3 in /requirements (#337)
• eb907b0 build(deps): bump pyopenssl from 25.3.0 to 26.0.0 in /requirements (#334)
• 84eaebf build(deps): bump astral-sh/setup-uv in the actions group (#331)
• 57c12be build(deps): bump charset-normalizer in the python-dependencies group (#332)
• 57918d7 build(deps): bump pyjwt from 2.11.0 to 2.12.0 in /requirements (#333)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 97.78%. Comparing base (cb9e034) to head (fbe957c).
⚠️ Report is 4 commits behind head on master.

Additional details and impacted files

@@           Coverage Diff           @@
##           master     #751   +/-   ##
=======================================
  Coverage   97.78%   97.78%           
=======================================
  Files          16       16           
  Lines        1172     1172           
  Branches       61       61           
=======================================
  Hits         1146     1146           
  Misses         23       23           
  Partials        3        3           

Flag	Coverage Δ
unit	96.84% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[codspeed-hq]

Merging this PR will not alter performance

✅ 63 untouched benchmarks
⏩ 4 skipped benchmarks¹

---

_{Comparing dependabot/github_actions/sigstore/gh-action-sigstore-python-3.3.0 (fbe957c) with master (cb9e034)²}

Footnotes

1. 4 benchmarks were skipped, so the baseline results were used instead. If they were deleted from the codebase, click here and archive them to remove them from the performance reports. ↩

2. No successful run was found on master (3443168) during the generation of this report, so cb9e034 was used instead as the comparison base. There might be some changes unrelated to this pull request in this report. ↩