From e172591ffb431b007e36502cb7135ae8cfb7efd3 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 1 Nov 2026 06:24:42 +0000
Subject: [PATCH] Bump the pip group with 6 updates

---
updated-dependencies:
- dependency-name: aiohttp
  dependency-version: 3.14.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip
- dependency-name: mypy
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip
- dependency-name: pytest-mock
  dependency-version: 3.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip
- dependency-name: python-gnupg
  dependency-version: 0.5.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip
- dependency-name: sigstore
  dependency-version: 4.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip
- dependency-name: paramiko
  dependency-version: 5.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 dev-requirements.txt  |  6 +++---
 mypy-requirements.txt |  6 +++---
 requirements.in       |  2 +-
 requirements.txt      | 20 ++++++--------------
 4 files changed, 13 insertions(+), 21 deletions(-)

diff --git a/dev-requirements.txt b/dev-requirements.txt
index 3b0ddf1e..8597cde9 100644
--- a/dev-requirements.txt
+++ b/dev-requirements.txt
@@ -568,9 +568,9 @@ pytest-cov==7.1.0 \
     --hash=sha256:30674f2b5f6351aa09702a9c8c364f6a01c27aae0c1366ae8016160d1efc56b2 \
     --hash=sha256:a0461110b7865f9a271aa1b51e516c9a95de9d696734a2f71e3e78f46e1d4678
     # via -r dev-requirements.in
-pytest-mock==3.15.1 \
-    --hash=sha256:0a25e2eb88fe5168d535041d09a4529a188176ae608a6d249ee65abc0949630d \
-    --hash=sha256:1849a238f6f396da19762269de72cb1814ab44416fa73a8686deac10b0d87a0f
+pytest-mock==3.17.0 \
+    --hash=sha256:1b82aa4b37137248bd687055e109723debeb07b489de1565297dc9589c5f2d6b \
+    --hash=sha256:e36576e0985e01027e999891e7a966c67822d40c89ef1b4c8b6e22737e3590b4
     # via -r dev-requirements.in
 typing-extensions==4.15.0 \
     --hash=sha256:0cea48d173cc12fa28ecabc3b837ea3cf6f38c6d1136f85cbaaf598984861466 \
diff --git a/mypy-requirements.txt b/mypy-requirements.txt
index b83bdbb0..9d2a4b2b 100644
--- a/mypy-requirements.txt
+++ b/mypy-requirements.txt
@@ -1,10 +1,10 @@
-aiohttp==3.14.4
+aiohttp==3.14.5
 alive_progress>=3.3.0
-mypy==2.3.1
+mypy==2.4.0
 pyfakefs
 pytest
 pytest-mock
 python-gnupg  # untyped :(
 requests>=2.34
-sigstore==4.5.0
+sigstore==4.5.1
 types-paramiko
diff --git a/requirements.in b/requirements.in
index 40ffc181..bc13e7cd 100644
--- a/requirements.in
+++ b/requirements.in
@@ -6,4 +6,4 @@ python-gnupg
 aiohttp
 blurb>=2.3.0
 requests>=2.34
-sigstore>=4.5.0
+sigstore>=4.5.1
diff --git a/requirements.txt b/requirements.txt
index cec8d40e..a0f6ae14 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -404,7 +404,6 @@ cryptography==50.0.1 \
     --hash=sha256:ff838d62ec1bfce4f9ba7fa16f4a7b554cd8d0c299e6be37502161a660c84eef
     # via
     #   paramiko
-    #   pyopenssl
     #   rfc3161-client
     #   sigstore
 dnspython==2.9.0 \
@@ -624,8 +623,8 @@ multidict==6.1.0 \
     # via
     #   aiohttp
     #   yarl
-paramiko==5.0.0 \
-    --hash=sha256:b7044611c30140d9a75261653210e2002977b71a0497ff3ba0d98d7edbf62f7c
+paramiko==5.1.0 \
+    --hash=sha256:d9fe6d67a9d0bbf3eb85b051d26ab850b678c02d060f32915b944e5ca6d0d9e1
     # via -r requirements.in
 platformdirs==4.3.6 \
     --hash=sha256:73e575e1408ab8103900836b97580d5307456908a03e92031bab39e4554cc3fb
@@ -715,9 +714,6 @@ propcache==0.2.1 \
     # via
     #   aiohttp
     #   yarl
-pyasn1==0.6.4 \
-    --hash=sha256:deda9277cfd454080ec40b207fb6df82206a3a2688735233cdcd8d3d565f088b
-    # via sigstore
 pycparser==2.22 \
     --hash=sha256:c3702b6d3dd8c7abc1afa565d7e63d53a1d0bd86cdc24edd75470f4de499cfcc
     # via cffi
@@ -881,11 +877,8 @@ pynacl==1.6.2 \
     --hash=sha256:d29bfe37e20e015a7d8b23cfc8bd6aa7909c92a1b8f41ee416bbb3e79ef182b2 \
     --hash=sha256:fe9847ca47d287af41e82be1dd5e23023d3c31a951da134121ab02e42ac218c9
     # via paramiko
-pyopenssl==26.4.0 \
-    --hash=sha256:f0eb0cb2d581d3ad2b9c489468485e7f2ab6727d08401bcf9d824c3caddf3c1c
-    # via sigstore
-python-gnupg==0.5.6 \
-    --hash=sha256:b5050a55663d8ab9fcc8d97556d229af337a87a3ebebd7054cbd8b7e2043394a
+python-gnupg==0.5.7 \
+    --hash=sha256:dc7afba57a9bc50163c27c726c66cb2fc9692248597f5201f4f7d9eb6097dd1d
     # via -r requirements.in
 requests==2.34.2 \
     --hash=sha256:2a0d60c172f83ac6ab31e4554906c0f3b3588d37b5cb939b1c061f4907e278e0
@@ -922,8 +915,8 @@ rich==13.9.4 \
 securesystemslib==1.2.0 \
     --hash=sha256:fa63abcb1cf4dba4f2df964f623baa45bc39029980d7a0a2119d90731942afc6
     # via tuf
-sigstore==4.5.0 \
-    --hash=sha256:f045b207f2e12605cf775ec38e89c5eda625d71ffa7830477db65e47ec2bc8b2
+sigstore==4.5.1 \
+    --hash=sha256:02e000197b34980f1d382741d6f83c2fecbcef7debf7304f36a5253f3c892cd9
     # via -r requirements.in
 sigstore-models==0.0.6 \
     --hash=sha256:5201a68f4d7d0f8bec1e2f4378eb646b084c52609a4e31db8c385095fff68b2e
@@ -941,7 +934,6 @@ typing-extensions==4.15.0 \
     #   aiosignal
     #   pydantic
     #   pydantic-core
-    #   pyopenssl
     #   sigstore-models
     #   typing-inspection
 typing-inspection==0.4.2 \