This update for rekor rebuilds it against the current go security release.
{ "binaries": [ { "rekor": "1.4.3-150400.4.38.1" } ] }
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:3852-1.json"