Update protobuf-specs to 0.5.2

sigstore-java/build.gradle.kts

@@ -21,10 +21,11 @@ dependencies {
 
     implementation("io.github.erdtman:java-json-canonicalization:1.1")
 
-    // this requires inclusion of protos is src/main/proto
-    protobuf("dev.sigstore:protobuf-specs:0.5.0")
+    protobuf("dev.sigstore:protobuf-specs:0.5.2")
+    implementation("com.google.api.grpc:proto-google-common-protos:2.74.0")
 
     implementation(platform("com.google.protobuf:protobuf-bom:4.35.1"))
+    implementation("com.google.protobuf:protobuf-java")
     implementation("com.google.protobuf:protobuf-java-util")
 
     // grpc deps

sigstore-java/src/main/java/dev/sigstore/bundle/BundleWriter.java

@@ -28,13 +28,14 @@
 import dev.sigstore.proto.common.v1.MessageSignature;
 import dev.sigstore.proto.common.v1.RFC3161SignedTimestamp;
 import dev.sigstore.proto.common.v1.X509Certificate;
+import dev.sigstore.proto.dsse.EnvelopeOuterClass.Envelope;
+import dev.sigstore.proto.dsse.EnvelopeOuterClass.Signature;
 import dev.sigstore.proto.rekor.v1.Checkpoint;
 import dev.sigstore.proto.rekor.v1.InclusionPromise;
 import dev.sigstore.proto.rekor.v1.InclusionProof;
 import dev.sigstore.proto.rekor.v1.KindVersion;
 import dev.sigstore.proto.rekor.v1.TransparencyLogEntry;
 import dev.sigstore.rekor.client.RekorEntry;
-import io.intoto.EnvelopeOuterClass.Envelope;
 import java.security.cert.CertificateEncodingException;
 import java.util.Base64;
 import java.util.List;
@@ -118,9 +119,7 @@ static dev.sigstore.proto.bundle.v1.Bundle.Builder createBundleBuilder(Bundle bu
               .setPayloadType(dsseEnvelope.getPayloadType());
       for (var sig : dsseEnvelope.getSignatures()) {
         envelopeBuilder.addSignatures(
-            io.intoto.EnvelopeOuterClass.Signature.newBuilder()
-                .setSig(ByteString.copyFrom(sig.getSig()))
-                .build());
+            Signature.newBuilder().setSig(ByteString.copyFrom(sig.getSig())).build());
       }
       builder.setDsseEnvelope(envelopeBuilder.build());
     }