fix(deps): update npm (#3647)

[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [@octokit/webhooks-types](https://github.com/octokit/webhooks) |
[`7.3.1` ->
`7.5.1`](https://renovatebot.com/diffs/npm/@octokit%2fwebhooks-types/7.3.1/7.5.1)
|
[![age](https://developer.mend.io/api/mc/badges/age/npm/@octokit%2fwebhooks-types/7.5.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/@octokit%2fwebhooks-types/7.5.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/@octokit%2fwebhooks-types/7.3.1/7.5.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@octokit%2fwebhooks-types/7.3.1/7.5.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
|
[sigstore](https://github.com/sigstore/sigstore-js/tree/main/packages/client#readme)
([source](https://github.com/sigstore/sigstore-js)) | [`2.2.2` ->
`2.3.0`](https://renovatebot.com/diffs/npm/sigstore/2.2.2/2.3.0) |
[![age](https://developer.mend.io/api/mc/badges/age/npm/sigstore/2.3.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/sigstore/2.3.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/sigstore/2.2.2/2.3.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/sigstore/2.2.2/2.3.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
| [yaml](https://eemeli.org/yaml/)
([source](https://github.com/eemeli/yaml)) | [`2.3.3` ->
`2.4.2`](https://renovatebot.com/diffs/npm/yaml/2.3.3/2.4.2) |
[![age](https://developer.mend.io/api/mc/badges/age/npm/yaml/2.4.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/yaml/2.4.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/yaml/2.3.3/2.4.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/yaml/2.3.3/2.4.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|

---

### Release Notes

<details>
<summary>octokit/webhooks (@&#8203;octokit/webhooks-types)</summary>

###
[`v7.5.1`](https://github.com/octokit/webhooks/releases/tag/v7.5.1)

[Compare
Source](https://github.com/octokit/webhooks/compare/v7.5.0...v7.5.1)

##### Bug Fixes

- **schema:** correct some schema IDs
([#&#8203;921](https://github.com/octokit/webhooks/issues/921))
([babdb8a](https://github.com/octokit/webhooks/commit/babdb8a21566f1521007e8979c29cbeca2e358ed))

###
[`v7.5.0`](https://github.com/octokit/webhooks/releases/tag/v7.5.0)

[Compare
Source](https://github.com/octokit/webhooks/compare/v7.4.0...v7.5.0)

##### Features

- **security:** Add provenance
([#&#8203;916](https://github.com/octokit/webhooks/issues/916))
([b28ee22](https://github.com/octokit/webhooks/commit/b28ee220ca96db44a8555551ccd6cf06c8b37052))

###
[`v7.4.0`](https://github.com/octokit/webhooks/releases/tag/v7.4.0)

[Compare
Source](https://github.com/octokit/webhooks/compare/v7.3.2...v7.4.0)

##### Features

- schema updates (adds custom_properties field) to
branch_protection_rule, check_suite, code_scanning_alert,
commit_comment, create, delete, dependabot_alert, deploy_key,
deployment, deployment_review, deployment_status, discussion,
disscussion_comment, fork, gollum, issue_comment, issues, label, member,
merge_group, meta, milestone, package, page_build. ping, project,
project_card, project_column, public, pull_request, pull_request_review,
pull_request_review_comment, pull_request_review_thread, push,
registry_package, release, repository, repository_dispatch,
repository_import, repository_vulnerability_alert,
secret_scanning_alert, star, status, team, team_add, watch,
workflow_dispatch, workflow_job, workflow_run,
branch_protection_configuration, common, custom_property,
custom_property_values
([#&#8203;904](https://github.com/octokit/webhooks/issues/904))
([bc5f6fd](https://github.com/octokit/webhooks/commit/bc5f6fd16b0df0e3058512e7d44dcba9ba3e0bb0))

###
[`v7.3.2`](https://github.com/octokit/webhooks/releases/tag/v7.3.2)

[Compare
Source](https://github.com/octokit/webhooks/compare/v7.3.1...v7.3.2)

##### Bug Fixes

- add "cancelled" as possible conclusion of a completed workflow step
([#&#8203;892](https://github.com/octokit/webhooks/issues/892))
([6df0bc4](https://github.com/octokit/webhooks/commit/6df0bc4cf83a86f170369263dfa1f2e104b93ff4))

</details>

<details>
<summary>sigstore/sigstore-js (sigstore)</summary>

###
[`v2.3.0`](https://github.com/sigstore/sigstore-js/releases/tag/sigstore%402.3.0)

[Compare
Source](https://github.com/sigstore/sigstore-js/compare/sigstore@2.2.2...sigstore@2.3.0)

##### Minor Changes

- [`ef7a2e6`](https://github.com/sigstore/sigstore-js/commit/ef7a2e6):
Add support for verifying new v0.3 Sigstore bundles

##### Patch Changes

- [`ef7a2e6`](https://github.com/sigstore/sigstore-js/commit/ef7a2e6):
Bump
[@&#8203;sigstore/protobuf-specs](https://github.com/sigstore/protobuf-specs)
from 0.3.0 to 0.3.1
- [`ef7a2e6`](https://github.com/sigstore/sigstore-js/commit/ef7a2e6):
Bump [@&#8203;sigstore/bundle](https://github.com/sigstore/bundle)
from 2.2.0 to 2.3.1
- [`ef7a2e6`](https://github.com/sigstore/sigstore-js/commit/ef7a2e6):
bump [@&#8203;sigstore/sign](https://github.com/sigstore/sign) from
2.2.3 to 2.3.0
- [`ef7a2e6`](https://github.com/sigstore/sigstore-js/commit/ef7a2e6):
Bump [@&#8203;sigstore/verify](https://github.com/sigstore/verify)
from 1.1.0 to 1.2.0

</details>

<details>
<summary>eemeli/yaml (yaml)</summary>

### [`v2.4.2`](https://github.com/eemeli/yaml/releases/tag/v2.4.2)

[Compare
Source](https://github.com/eemeli/yaml/compare/v2.4.1...v2.4.2)

- Restrict YAML 1.1 boolean strings to their explicit capitalization
([#&#8203;530](https://github.com/eemeli/yaml/issues/530))
- Add sponsorship by [Scipress](https://www.scipress.io/)
([#&#8203;536](https://github.com/eemeli/yaml/issues/536))

###
[`v2.4.1`](https://github.com/eemeli/yaml/compare/v2.4.0...4aa56d337dc5e286eb0c9111a3b370f21e321117)

[Compare
Source](https://github.com/eemeli/yaml/compare/v2.4.0...v2.4.1)

### [`v2.4.0`](https://github.com/eemeli/yaml/releases/tag/v2.4.0)

[Compare
Source](https://github.com/eemeli/yaml/compare/v2.3.4...v2.4.0)

- Add a command-line tool
([#&#8203;523](https://github.com/eemeli/yaml/issues/523))
- Use the `lineWidth` option for line breaking in flow collections
([#&#8203;522](https://github.com/eemeli/yaml/issues/522))

### [`v2.3.4`](https://github.com/eemeli/yaml/releases/tag/v2.3.4)

[Compare
Source](https://github.com/eemeli/yaml/compare/v2.3.3...v2.3.4)

- Do not throw for carriage return in tag shorthand
([#&#8203;501](https://github.com/eemeli/yaml/issues/501))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "before 4am on the first day of the
month" (UTC), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/slsa-framework/slsa-github-generator).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4zNjMuNSIsInVwZGF0ZWRJblZlciI6IjM3LjM2My41IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

---------

Signed-off-by: Mend Renovate <bot@renovateapp.com>
Signed-off-by: github-actions <github-actions@github.com>
Co-authored-by: github-actions <github-actions@github.com>

.github/actions/sign-attestations/package.json

@@ -31,7 +31,7 @@
     "@actions/core": "1.10.1",
     "@actions/github": "6.0.0",
     "@sigstore/rekor-types": "2.0.0",
-    "sigstore": "2.2.2",
+    "sigstore": "2.3.0",
     "tscommon": "file:../tscommon/tscommon-0.0.0.tgz"
   }
 }