v3.0.5

v3.0.5 v3.0.5 resolves a low-severity advisory for private PKIs. Deprecations Deprecate rekor-entry-type flag ( #4691 ) Deprecate cosign triangulate ( #4676 ) Deprecate cosign copy ( #4681 ) Features Automatically require signed timestamp with Rekor v2 entries ( #4666 ) Allow –local-image with –new-bundle-format for v2 and v3 signatures ( #4626 ) Add mTLS support for TSA client connections when signing with a signing config ( #4620 ) Enforce TSA requirement for Rekor v2, Fuclio signing ( #4683 ) Bug Fixes Add empty predicate to cosign sign when payload type is application/vnd.in-toto+json (