bump @sigstore/oci to 0.3.6 (#88)

Signed-off-by: Brian DeHamer <bdehamer@github.com>

package.json

@@ -1,7 +1,7 @@
 {
   "name": "actions/attest",
   "description": "Generate signed attestations for workflow artifacts",
-  "version": "1.2.0",
+  "version": "1.2.1",
   "author": "",
   "private": true,
   "homepage": "https://github.com/actions/attest",
@@ -72,7 +72,7 @@
     "@actions/attest": "^1.2.1",
     "@actions/core": "^1.10.1",
     "@actions/glob": "^0.4.0",
-    "@sigstore/oci": "^0.3.4",
+    "@sigstore/oci": "^0.3.6",
     "csv-parse": "^5.5.6"
   },
   "devDependencies": {