[MRESOLVER-680] Sigstore extension added (#661)

Add the sigstore extension to default values of "omit checksums".

---

https://issues.apache.org/jira/browse/MRESOLVER-680

Author: cstamas

maven-resolver-impl/src/main/java/org/eclipse/aether/internal/impl/DefaultArtifactPredicateFactory.java

@@ -51,7 +51,7 @@ public final class DefaultArtifactPredicateFactory implements ArtifactPredicateF
     public static final String CONFIG_PROP_OMIT_CHECKSUMS_FOR_EXTENSIONS =
             CONFIG_PROPS_PREFIX + "omitChecksumsForExtensions";
 
-    public static final String DEFAULT_OMIT_CHECKSUMS_FOR_EXTENSIONS = ".asc,.sigstore";
+    public static final String DEFAULT_OMIT_CHECKSUMS_FOR_EXTENSIONS = ".asc,.sigstore,.sigstore.json";
 
     private final ChecksumAlgorithmFactorySelector checksumAlgorithmFactorySelector;
 

src/site/markdown/configuration.md

@@ -32,7 +32,7 @@ under the License.
 | `"aether.artifactResolver.simpleLrmInterop"` | `Boolean` | Configuration to enable "interoperability" with Simple LRM, but this breaks RRF feature, hence this configuration is IGNORED when RRF is used, and is warmly recommended to leave it disabled even if no RRF is being used. |  `false`  |  |  No  | Session Configuration |
 | `"aether.artifactResolver.snapshotNormalization"` | `Boolean` | Configuration to enable "snapshot normalization", downloaded snapshots from remote with timestamped file names will have file names converted back to baseVersion. It replaces the timestamped snapshot file name with a filename containing the SNAPSHOT qualifier only. This only affects resolving/retrieving artifacts but not uploading those. |  `true`  |  |  No  | Session Configuration |
 | `"aether.chainedLocalRepository.ignoreTailAvailability"` | `Boolean` | When using chained local repository, should be the artifact availability ignored in tail. |  `true`  | 1.9.2 |  No  | Session Configuration |
-| `"aether.checksums.omitChecksumsForExtensions"` | `String` | Comma-separated list of extensions with leading dot (example ".asc") that should have checksums omitted. These are applied to sub-artifacts only. Note: to achieve 1.7.x aether.checksums.forSignature=true behaviour, pass empty string as value for this property. |  `".asc,.sigstore"`  |  |  No  | Session Configuration |
+| `"aether.checksums.omitChecksumsForExtensions"` | `String` | Comma-separated list of extensions with leading dot (example ".asc") that should have checksums omitted. These are applied to sub-artifacts only. Note: to achieve 1.7.x aether.checksums.forSignature=true behaviour, pass empty string as value for this property. |  `".asc,.sigstore,.sigstore.json"`  |  |  No  | Session Configuration |
 | `"aether.conflictResolver.verbose"` | `Object` | The key in the repository session's <code>org.eclipse.aether.RepositorySystemSession#getConfigProperties() configuration properties</code> used to store a <code>Boolean</code> flag controlling the transformer's verbose mode. Accepted values are Boolean types, String type (where "true" would be interpreted as <code>true</code> ) or Verbosity enum instances. |  `"NONE"`  |  |  No  | Session Configuration |
 | `"aether.connector.basic.downstreamThreads"` | `Integer` | Number of threads in basic connector for downloading. |  `5`  | 2.0.0 |  Yes  | Session Configuration |
 | `"aether.connector.basic.parallelPut"` | `Boolean` | Enables or disables parallel PUT processing (parallel deploys) on basic connector globally or per remote repository. When disabled, connector behaves exactly as in Maven 3.8.x did: GETs are parallel while PUTs are sequential. |  `true`  | 1.9.5 |  Yes  | Session Configuration |