From 4decdd3d4cfcd45f740304a2258de96b3fb0c1c3 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 4 Aug 2026 19:34:04 +0000
Subject: [PATCH] build(deps): bump sigstore from 4.4.0 to 4.5.0

Bumps [sigstore](https://github.com/sigstore/sigstore-python) from 4.4.0 to 4.5.0.
- [Release notes](https://github.com/sigstore/sigstore-python/releases)
- [Changelog](https://github.com/sigstore/sigstore-python/blob/main/CHANGELOG.md)
- [Commits](https://github.com/sigstore/sigstore-python/compare/v4.4.0...v4.5.0)

---
updated-dependencies:
- dependency-name: sigstore
  dependency-version: 4.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 install/requirements.in  | 2 +-
 install/requirements.txt | 6 +++---
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/install/requirements.in b/install/requirements.in
index 0b1001443..d388216b8 100644
--- a/install/requirements.in
+++ b/install/requirements.in
@@ -1 +1 @@
-sigstore==4.4.0
+sigstore==4.5.0
diff --git a/install/requirements.txt b/install/requirements.txt
index d50324ebd..139f5c3dc 100644
--- a/install/requirements.txt
+++ b/install/requirements.txt
@@ -474,9 +474,9 @@ securesystemslib==1.4.0 \
     --hash=sha256:a0743a3d978cf26e98a70a57e3fbd5a18e0a74c20cabe615f6a55b02ef0272b3 \
     --hash=sha256:faea87be0f9c4b4277a5fa1b54bf9bfd807be9a94ab11be6c557dc8b75c43285
     # via tuf
-sigstore==4.4.0 \
-    --hash=sha256:20ffe791c1fa33ce62148c0291b46280d29c1910964d9afac419e9b1a8afc56b \
-    --hash=sha256:80c36d08b02479e2a282d0bea93de68fe0d43a93b0d58e4d9ac6bb9f8425957c
+sigstore==4.5.0 \
+    --hash=sha256:020d3e07f622b2916bf453e66ff6ff0711e1fdc5ab69e8bd8902f71d9fcb316f \
+    --hash=sha256:f045b207f2e12605cf775ec38e89c5eda625d71ffa7830477db65e47ec2bc8b2
     # via -r install/requirements.in
 sigstore-models==0.0.6 \
     --hash=sha256:5201a68f4d7d0f8bec1e2f4378eb646b084c52609a4e31db8c385095fff68b2e \