fix(deps): update module github.com/sigstore/sigstore to v1.6.4

[renovate-bot]

This PR contains the following updates:

Package	Type	Update	Change
github.com/sigstore/sigstore	require	patch	v1.6.3 -> v1.6.4

---

⚠ Dependency Lookup Warnings ⚠

Warnings were logged while processing this repo. Please check the Dependency Dashboard for more information.

---

Release Notes

sigstore/sigstore

v1.6.4

Compare Source

What's Changed

• break out e2e test images into Dockerfiles so dependabot will work by @​bobcallaway in https://github.com/sigstore/sigstore/pull/1116
• remove trailing slash in dependabot cfg by @​bobcallaway in https://github.com/sigstore/sigstore/pull/1117
• chore: remove leftover TUF code - policy.go and signer.go by @​rdimitrov in https://github.com/sigstore/sigstore/pull/1128

Full Changelog: sigstore/sigstore@v1.6.3...v1.6.4

---

Configuration

📅 Schedule: Branch creation - "every weekend" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[ianlewis]

I'm not sure why the pre-submits are failing. I can't reproduce it locally.

[ianlewis]

This PR is trying to update the in-toto library to 0.7.0 which loses the SLSA v1.0 types we need. Created PR #1910 to exclude the package.

[ianlewis]

This PR is trying to update the in-toto library to 0.7.0 which loses the SLSA v1.0 types we need. Created PR #1910 to exclude the package.

#1910 seemed to work but it's still having issues. Will check on this after releasing v1.6.0.

[ianlewis]

This is blocked on #1946