deps: update module github.com/sylabs/sif/v2 to v2.17.1

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
github.com/sylabs/sif/v2	v2.16.0 -> v2.17.1

---

Release Notes

sylabs/sif (github.com/sylabs/sif/v2)

v2.17.1

Compare Source

What's Changed

• refactor: use DSSE wrappers from sigstore by @​tri-adam in https://github.com/sylabs/sif/pull/366
• ci: add testing against Go 1.23 RC by @​tri-adam in https://github.com/sylabs/sif/pull/368

Full Changelog: sylabs/sif@v2.17.0...v2.17.1

v2.17.0

Compare Source

This release adds support for updating the digest of an OCI blob within a SIF.

Specifically, the following API has been added:

• func (*FileImage) SetOCIBlobDigest: updates the digest of the OCI blob object with id to h, according to opts.

What's Changed

• chore: bump golangci-lint to v1.57 by @​tri-adam in https://github.com/sylabs/sif/pull/357
• build(deps): bump github.com/sigstore/sigstore from 1.8.2 to 1.8.3 by @​dependabot in https://github.com/sylabs/sif/pull/358
• build(deps): bump github.com/sigstore/sigstore from 1.8.3 to 1.8.4 by @​dependabot in https://github.com/sylabs/sif/pull/359
• ci: bump golangci-lint to v1.59 by @​tri-adam in https://github.com/sylabs/sif/pull/360
• ci: update to use goreleaser v2 by @​tri-adam in https://github.com/sylabs/sif/pull/361
• build(deps): bump github.com/google/go-containerregistry from 0.19.1 to 0.19.2 by @​dependabot in https://github.com/sylabs/sif/pull/362
• build(deps): bump github.com/spf13/cobra from 1.8.0 to 1.8.1 by @​dependabot in https://github.com/sylabs/sif/pull/363
• refactor: split add/del/set code into files by @​tri-adam in https://github.com/sylabs/sif/pull/364
• feat: add SetOCIBlobDigest by @​tri-adam in https://github.com/sylabs/sif/pull/365

Full Changelog: sylabs/sif@v2.16.0...v2.17.0

---

Configuration

📅 Schedule: Branch creation - "every weekend" in timezone Europe/Berlin, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.