Bump the prod-deps group with 1 update (#1006)

* Bump the prod-deps group with 1 update

Bumps the prod-deps group with 1 update: [jose](https://github.com/panva/jose).


Updates `jose` from 5.2.1 to 5.2.2
- [Release notes](https://github.com/panva/jose/releases)
- [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md)
- [Commits](panva/jose@v5.2.1...v5.2.2)

---
updated-dependencies:
- dependency-name: jose
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
...

Signed-off-by: dependabot[bot] <support@github.com>

* add changeset for @sigstore/mock

Signed-off-by: Brian DeHamer <bdehamer@github.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Brian DeHamer <bdehamer@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Brian DeHamer <bdehamer@github.com>

.changeset/rare-bobcats-deny.md

@@ -0,0 +1,5 @@
+---
+"@sigstore/mock": patch
+---
+
+Bump jose from 5.2.1 to 5.2.2

packages/mock/package.json

@@ -36,7 +36,7 @@
     "asn1js": "^3.0.5",
     "bytestreamjs": "^2.0.1",
     "canonicalize": "^2.0.0",
-    "jose": "^5.2.1",
+    "jose": "^5.2.2",
     "nock": "^13.5.1",
     "pkijs": "^3.0.15",
     "pvutils": "^1.1.3"