Merge pull request #417 from trail-of-forks/ft/bump-deps

Bump `pypi-attestations` and `sigstore`

requirements/runtime.in

@@ -13,8 +13,8 @@ id ~= 1.0
 requests
 
 # NOTE: Used to generate attestations.
-pypi-attestations ~= 0.0.29
-sigstore ~= 4.1
+pypi-attestations ~= 0.0.30
+sigstore ~= 4.5
 
 # NOTE: Used to detect the PyPI package name from the distribution files
 packaging

requirements/runtime.txt

@@ -70,13 +70,13 @@ pyasn1==0.6.1
     #   sigstore
 pycparser==2.22
     # via cffi
-pydantic==2.11.7
+pydantic==2.13.4
     # via
     #   pypi-attestations
     #   sigstore
     #   sigstore-models
     #   sigstore-rekor-types
-pydantic-core==2.33.2
+pydantic-core==2.46.4
     # via pydantic
 pygments==2.19.2
     # via
@@ -86,7 +86,7 @@ pyjwt==2.10.1
     # via sigstore
 pyopenssl==25.1.0
     # via sigstore
-pypi-attestations==0.0.29
+pypi-attestations==0.0.30
     # via -r runtime.in
 readme-renderer==44.0
     # via twine
@@ -116,11 +116,11 @@ secretstorage==3.5.0
     # via keyring
 securesystemslib==1.3.0
     # via tuf
-sigstore==4.1.0
+sigstore==4.5.0
     # via
     #   -r runtime.in
     #   pypi-attestations
-sigstore-models==0.0.5
+sigstore-models==0.0.6
     # via
     #   pypi-attestations
     #   sigstore
@@ -136,7 +136,7 @@ typing-extensions==4.15.0
     #   pydantic-core
     #   sigstore-models
     #   typing-inspection
-typing-inspection==0.4.1
+typing-inspection==0.4.2
     # via pydantic
 urllib3==2.5.0
     # via