From fe938dc474d6e89f1f1fc9c3cc8d6c43a1ced74c Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 1 Aug 2026 06:24:22 +0000
Subject: [PATCH] Bump the pip group with 3 updates

Bumps the pip group with 3 updates: [aiohttp](https://github.com/aio-libs/aiohttp), [sigstore](https://github.com/sigstore/sigstore-python) and [mypy](https://github.com/python/mypy).


Updates `aiohttp` from 3.14.1 to 3.14.3
- [Changelog](https://github.com/aio-libs/aiohttp/blob/master/CHANGES.rst)
- [Commits](https://github.com/aio-libs/aiohttp/compare/v3.14.1...v3.14.3)

Updates `sigstore` from 4.2.0 to 4.4.0
- [Release notes](https://github.com/sigstore/sigstore-python/releases)
- [Changelog](https://github.com/sigstore/sigstore-python/blob/main/CHANGELOG.md)
- [Commits](https://github.com/sigstore/sigstore-python/compare/v4.2.0...v4.4.0)

Updates `mypy` from 2.1.0 to 2.3.0
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](https://github.com/python/mypy/compare/v2.1.0...v2.3.0)

---
updated-dependencies:
- dependency-name: aiohttp
  dependency-version: 3.14.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip
- dependency-name: sigstore
  dependency-version: 4.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip
- dependency-name: mypy
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 mypy-requirements.txt | 6 +++---
 requirements.in       | 2 +-
 requirements.txt      | 4 ++--
 3 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/mypy-requirements.txt b/mypy-requirements.txt
index 3596f497..11c21daa 100644
--- a/mypy-requirements.txt
+++ b/mypy-requirements.txt
@@ -1,10 +1,10 @@
-aiohttp==3.14.1
+aiohttp==3.14.3
 alive_progress>=3.3.0
-mypy==2.1.0
+mypy==2.3.0
 pyfakefs
 pytest
 pytest-mock
 python-gnupg  # untyped :(
-sigstore==4.2.0
+sigstore==4.4.0
 types-paramiko
 types-requests
diff --git a/requirements.in b/requirements.in
index 43fddcbc..374e9ba2 100644
--- a/requirements.in
+++ b/requirements.in
@@ -5,4 +5,4 @@ alive_progress>=3.3.0
 python-gnupg
 aiohttp
 blurb>=1.2.1
-sigstore>=4.2.0
+sigstore>=4.4.0
diff --git a/requirements.txt b/requirements.txt
index a037fde0..0179e4f2 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -924,8 +924,8 @@ rich==13.9.4 \
 securesystemslib==1.2.0 \
     --hash=sha256:fa63abcb1cf4dba4f2df964f623baa45bc39029980d7a0a2119d90731942afc6
     # via tuf
-sigstore==4.2.0 \
-    --hash=sha256:ed2e0f50aae85148a8aa4fc0f57c298927fce430ad1f988f38611ce90c85829f
+sigstore==4.4.0 \
+    --hash=sha256:80c36d08b02479e2a282d0bea93de68fe0d43a93b0d58e4d9ac6bb9f8425957c
     # via -r requirements.in
 sigstore-models==0.0.6 \
     --hash=sha256:5201a68f4d7d0f8bec1e2f4378eb646b084c52609a4e31db8c385095fff68b2e