build(deps): bump azure/trusted-signing-action from 0.4.0 to 0.5.0 (#…

…1750)

Bumps
[azure/trusted-signing-action](https://github.com/azure/trusted-signing-action)
from 0.4.0 to 0.5.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/azure/trusted-signing-action/releases">azure/trusted-signing-action's
releases</a>.</em></p>
<blockquote>
<h2>v0.5.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Fix incorrect version reference in documentation for
azure/trusted-signing-action by <a
href="https://github.com/teamchong"><code>@​teamchong</code></a> in <a
href="https://github.com/Azure/trusted-signing-action/pull/48">Azure/trusted-signing-action#48</a></li>
<li>Update OIDC.md by <a
href="https://github.com/LanceMcCarthy"><code>@​LanceMcCarthy</code></a>
in <a
href="https://github.com/Azure/trusted-signing-action/pull/50">Azure/trusted-signing-action#50</a></li>
<li>Add support for ClickOnce by <a
href="https://github.com/japarson"><code>@​japarson</code></a> in <a
href="https://github.com/Azure/trusted-signing-action/pull/54">Azure/trusted-signing-action#54</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/teamchong"><code>@​teamchong</code></a>
made their first contribution in <a
href="https://github.com/Azure/trusted-signing-action/pull/48">Azure/trusted-signing-action#48</a></li>
<li><a
href="https://github.com/LanceMcCarthy"><code>@​LanceMcCarthy</code></a>
made their first contribution in <a
href="https://github.com/Azure/trusted-signing-action/pull/50">Azure/trusted-signing-action#50</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/Azure/trusted-signing-action/compare/v0.4.0...v0.5.0">https://github.com/Azure/trusted-signing-action/compare/v0.4.0...v0.5.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/Azure/trusted-signing-action/commit/07c81171dd46a04e1b9f382b6c693815828bbbf7"><code>07c8117</code></a>
Add support for ClickOnce (<a
href="https://github.com/azure/trusted-signing-action/issues/54">#54</a>)</li>
<li><a
href="https://github.com/Azure/trusted-signing-action/commit/964f90572aff24b35dce2f5795aecf90b29407d5"><code>964f905</code></a>
Update OIDC.md (<a
href="https://github.com/azure/trusted-signing-action/issues/50">#50</a>)</li>
<li><a
href="https://github.com/Azure/trusted-signing-action/commit/3d8629b1676c5f2952131fc0db3a57a1deb4be9e"><code>3d8629b</code></a>
Fix incorrect version reference in documentation for
azure/trusted-signing-ac...</li>
<li>See full diff in <a
href="https://github.com/azure/trusted-signing-action/compare/v0.4.0...v0.5.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=azure/trusted-signing-action&package-manager=github_actions&previous-version=0.4.0&new-version=0.5.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

.github/workflows/release.yml

@@ -177,7 +177,7 @@ jobs:
         subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID }}
 
     - name: Sign payload files with Azure Code Signing
-      uses: azure/trusted-signing-action@v0.4.0
+      uses: azure/trusted-signing-action@v0.5.0
       with:
         endpoint: https://wus2.codesigning.azure.net/
         trusted-signing-account-name: git-fundamentals-signing
@@ -204,7 +204,7 @@ jobs:
          -Destination $env:GITHUB_WORKSPACE\installers
 
     - name: Sign installers with Azure Code Signing
-      uses: azure/trusted-signing-action@v0.4.0
+      uses: azure/trusted-signing-action@v0.5.0
       with:
         endpoint: https://wus2.codesigning.azure.net/
         trusted-signing-account-name: git-fundamentals-signing