chore(deps): update rust crate minisign-verify to 0.3 (#3658)

* chore(deps): update rust crate minisign-verify to 0.3

* chore(deps): update rust crate minisign-verify to 0.3

* change file

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Lucas Nogueira <lucas@tauri.app>

.changes/updater-minisign-verify-0.3.md

@@ -0,0 +1,6 @@
+---
+"updater": patch
+"updater-js": patch
+---
+
+Update `minisign-verify` to 0.3, which rejects signatures with a non-canonical Ed25519 `S` value. The `Error::Minisign` variant now wraps `minisign_verify` 0.3's `Error`, and its message reads like "The signature verification failed" instead of the variant name (`InvalidSignature`).

Cargo.lock

@@ -3558,7 +3558,7 @@ dependencies = [
  "cc",
  "libc",
  "libflate",
- "minisign-verify",
+ "minisign-verify 0.2.3",
  "pkg-config",
  "tar",
  "ureq",
@@ -3722,6 +3722,12 @@ version = "0.2.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "6367d84fb54d4242af283086402907277715b8fe46976963af5ebf173f8efba3"
 
+[[package]]
+name = "minisign-verify"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "871285dc19d8d0ebe0eef3d0e99a205f2a71363b122632cbbfa4a6c370a960ce"
+
 [[package]]
 name = "miniz_oxide"
 version = "0.8.8"
@@ -7108,7 +7114,7 @@ dependencies = [
  "infer",
  "libc",
  "log",
- "minisign-verify",
+ "minisign-verify 0.3.0",
  "osakit",
  "percent-encoding",
  "reqwest 0.13.1",

plugins/updater/Cargo.toml

@@ -50,7 +50,7 @@ rustls = { version = "0.23", default-features = false, features = [
 ], optional = true }
 url = { workspace = true }
 http = "1"
-minisign-verify = "0.2"
+minisign-verify = "0.3"
 time = { version = "0.3", features = ["parsing", "formatting"] }
 base64 = "0.22"
 semver = { version = "1", features = ["serde"] }