Sigstore Sigstore-ruby vulnerabilities

• sigstore, sigstore sigstore-ruby +1 more sigstore-ruby verifier returns success for DSSE bundles with mismatched in-toto subject digest CVE-2026-31830 Fix available 7.5 HighMarch 10, 2026