From 6d9667166aae74d2a3bfd669b87f50636f492586 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 15 Dec 2025 10:43:30 +0000 Subject: [PATCH] Bump sigstore/cosign-installer from 3.9.1 to 4.0.0 Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 3.9.1 to 4.0.0. - [Release notes](https://github.com/sigstore/cosign-installer/releases) - [Commits](https://github.com/sigstore/cosign-installer/compare/398d4b0eeef1380460a10c8013a76f728fb906ac...faadad0cce49287aee09b3a48701e75088a2c6ad) --- updated-dependencies: - dependency-name: sigstore/cosign-installer dependency-version: 4.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/build-and-push-cross.yaml | 2 +- .github/workflows/build-and-push-qemu.yaml | 2 +- .github/workflows/build-and-push-runners.yaml | 2 +- .github/workflows/build-and-push.yaml | 2 +- 4 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/build-and-push-cross.yaml b/.github/workflows/build-and-push-cross.yaml index be37d2a..5fd565c 100644 --- a/.github/workflows/build-and-push-cross.yaml +++ b/.github/workflows/build-and-push-cross.yaml @@ -16,7 +16,7 @@ jobs: steps: - name: Install Cosign - uses: sigstore/cosign-installer@398d4b0eeef1380460a10c8013a76f728fb906ac # v3.9.1 + uses: sigstore/cosign-installer@faadad0cce49287aee09b3a48701e75088a2c6ad # v4.0.0 - name: Set up QEMU uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # v3 diff --git a/.github/workflows/build-and-push-qemu.yaml b/.github/workflows/build-and-push-qemu.yaml index f9c42c7..0786def 100644 --- a/.github/workflows/build-and-push-qemu.yaml +++ b/.github/workflows/build-and-push-qemu.yaml @@ -17,7 +17,7 @@ jobs: steps: - name: Install Cosign - uses: sigstore/cosign-installer@398d4b0eeef1380460a10c8013a76f728fb906ac # v3.9.1 + uses: sigstore/cosign-installer@faadad0cce49287aee09b3a48701e75088a2c6ad # v4.0.0 - name: Set up QEMU uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # v3 diff --git a/.github/workflows/build-and-push-runners.yaml b/.github/workflows/build-and-push-runners.yaml index 3516f03..a6b9aec 100644 --- a/.github/workflows/build-and-push-runners.yaml +++ b/.github/workflows/build-and-push-runners.yaml @@ -122,7 +122,7 @@ jobs: steps: - name: Install Cosign - uses: sigstore/cosign-installer@398d4b0eeef1380460a10c8013a76f728fb906ac # v3.9.1 + uses: sigstore/cosign-installer@faadad0cce49287aee09b3a48701e75088a2c6ad # v4.0.0 - name: Login to GitHub Container Registry uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3 diff --git a/.github/workflows/build-and-push.yaml b/.github/workflows/build-and-push.yaml index 8e018d9..3b9c608 100644 --- a/.github/workflows/build-and-push.yaml +++ b/.github/workflows/build-and-push.yaml @@ -17,7 +17,7 @@ jobs: steps: - name: Install Cosign - uses: sigstore/cosign-installer@398d4b0eeef1380460a10c8013a76f728fb906ac # v3.9.1 + uses: sigstore/cosign-installer@faadad0cce49287aee09b3a48701e75088a2c6ad # v4.0.0 - name: Set up Docker Buildx uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3