fix(deps): update common, image, and storage deps

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

vendor/github.com/containers/image/v5/signature/internal/rekor_api_types.go

@@ -81,6 +81,8 @@ type RekorHashedrekordV001SchemaDataHash struct {
 
 const (
 	RekorHashedrekordV001SchemaDataHashAlgorithmSha256 string = "sha256"
+	RekorHashedrekordV001SchemaDataHashAlgorithmSha384 string = "sha384"
+	RekorHashedrekordV001SchemaDataHashAlgorithmSha512 string = "sha512"
 )
 
 type RekorHashedrekordV001SchemaSignature struct {

vendor/github.com/containers/image/v5/signature/sigstore/rekor/rekor.go

@@ -14,6 +14,7 @@ import (
 
 	"github.com/containers/image/v5/signature/internal"
 	signerInternal "github.com/containers/image/v5/signature/sigstore/internal"
+	"github.com/hashicorp/go-cleanhttp"
 	"github.com/hashicorp/go-retryablehttp"
 	"github.com/sirupsen/logrus"
 )
@@ -44,6 +45,7 @@ type rekorClient struct {
 // newRekorClient creates a rekorClient for rekorURL.
 func newRekorClient(rekorURL *url.URL) *rekorClient {
 	retryableClient := retryablehttp.NewClient()
+	retryableClient.HTTPClient = cleanhttp.DefaultClient()
 	retryableClient.RetryMax = defaultRetryCount
 	retryableClient.Logger = leveledLoggerForLogrus(logrus.StandardLogger())
 	basePath := rekorURL.Path
@@ -127,7 +129,7 @@ func stringPointer(s string) *string {
 // uploadKeyOrCert integrates this code into sigstore/internal.Signer.
 // Given components of the created signature, it returns a SET that should be added to the signature.
 func (r *rekorClient) uploadKeyOrCert(ctx context.Context, keyOrCertBytes []byte, signatureBytes []byte, payloadBytes []byte) ([]byte, error) {
-	payloadHash := sha256.Sum256(payloadBytes) // HashedRecord only accepts SHA-256
+	payloadHash := sha256.Sum256(payloadBytes) // Consistent with cosign.
 	hashedRekordSpec, err := json.Marshal(internal.RekorHashedrekordV001Schema{
 		Data: &internal.RekorHashedrekordV001SchemaData{
 			Hash: &internal.RekorHashedrekordV001SchemaDataHash{

vendor/github.com/containers/storage/Makefile

@@ -35,7 +35,7 @@ TESTFLAGS := $(shell $(GO) test -race $(BUILDFLAGS) ./pkg/stringutils 2>&1 > /de
 # N/B: This value is managed by Renovate, manual changes are
 # possible, as long as they don't disturb the formatting
 # (i.e. DO NOT ADD A 'v' prefix!)
-GOLANGCI_LINT_VERSION := 2.1.6
+GOLANGCI_LINT_VERSION := 2.2.1
 
 default all: local-binary docs local-validate local-cross ## validate all checks, build and cross-build\nbinaries and docs