deps: update module github.com/sylabs/sif/v2 to v2.9.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
github.com/sylabs/sif/v2	replace	minor	v2.8.3 -> v2.9.0

---

Release Notes

sylabs/sif

v2.9.0

Compare Source

This release adds support for digital signature data objects in Dead Simple Signing Envelope (DSSE) format. This adds support for digital signatures that use non-PGP key material sources.

Specifically, the following APIs have been added:

• func OptSignWithSigner: use a signature.Signer as key material when calling NewSigner.
• func OptVerifyWithVerifier: use one or more signature.Verifier as key material when calling NewVerifier.
• func (VerifyResult) Keys: get the public key(s) used to verify a signature.

What's Changed

• Rename PGP test files by @​tri-adam in https://github.com/sylabs/sif/pull/243
• DSSE support by @​tri-adam in https://github.com/sylabs/sif/pull/228
• build(deps): bump github.com/sigstore/sigstore from 1.4.5 to 1.4.6 by @​dependabot in https://github.com/sylabs/sif/pull/246
• Expose non-PGP digital signature support by @​tri-adam in https://github.com/sylabs/sif/pull/245
• chore: bump node version by @​tri-adam in https://github.com/sylabs/sif/pull/247

Full Changelog: sylabs/sif@v2.8.3...v2.9.0

---

Configuration

📅 Schedule: Branch creation - "every weekend" in timezone Europe/Berlin, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.