build(deps): bump sigstore/cosign-installer from 3.5.0 to 4.1.2

Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 3.5.0 to 4.1.2.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](https://github.com/sigstore/cosign-installer/compare/v3.5.0...v4.1.2)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-version: 4.1.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
This commit is contained in:
dependabot[bot] 2026-08-19 10:16:09 +00:00 committed by GitHub
parent 0b695abe02
commit c872e02af2
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -23,7 +23,7 @@ jobs:
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
- name: Setup cosign - name: Setup cosign
uses: sigstore/cosign-installer@v3.5.0 uses: sigstore/cosign-installer@v4.1.2
- name: Validate bootstrap - name: Validate bootstrap
run: | run: |
@ -250,7 +250,7 @@ jobs:
needs: [bootstrap, publish-linux, package-windows] needs: [bootstrap, publish-linux, package-windows]
steps: steps:
- name: Setup cosign - name: Setup cosign
uses: sigstore/cosign-installer@v3.5.0 uses: sigstore/cosign-installer@v4.1.2
- name: Download all artifacts - name: Download all artifacts
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1