build(deps): bump the actions group with 1 update (#859)

* build(deps): bump the actions group with 1 update

Bumps the actions group with 1 update: [sigstore/sigstore-conformance](https://github.com/sigstore/sigstore-conformance).


Updates `sigstore/sigstore-conformance` from 0.0.9 to 0.0.10
- [Release notes](https://github.com/sigstore/sigstore-conformance/releases)
- [Commits](sigstore/sigstore-conformance@c8d17eb...7375951)

---
updated-dependencies:
- dependency-name: sigstore/sigstore-conformance
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <[email protected]>

* conformance: Set another test as xfail

This has the same cause as the already defined xfail (there are several
other tests that are also failing because missing --trusted-root flag
but those tests happen to expect failure so are not showing up yet).

Signed-off-by: Jussi Kukkonen <[email protected]>

---------

Signed-off-by: dependabot[bot] <[email protected]>
Signed-off-by: Jussi Kukkonen <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jussi Kukkonen <[email protected]>

.github/workflows/conformance.yml

@@ -22,7 +22,7 @@ jobs:
       - name: install sigstore-python
         run: python -m pip install .
 
-      - uses: sigstore/sigstore-conformance@c8d17eb7ee884cf86b93a3a3f471648fb0a83819 # v0.0.9
+      - uses: sigstore/sigstore-conformance@7375951316d6b28d07f7406c01e1dc7de2a75ce7 # v0.0.10
         with:
           entrypoint: ${{ github.workspace }}/test/integration/sigstore-python-conformance
-          xfail: "test_verify_with_trust_root" # see issue 821
+          xfail: "test_verify_with_trust_root test_verify_dsse_bundle_with_trust_root" # see issue 821