build(deps): bump sigstore/cosign-installer from 3.5.0 to 4.1.2 #45

Open
dependabot[bot] wants to merge 1 commit from dependabot/github_actions/sigstore/cosign-installer-4.1.2 into main

View file

@ -23,7 +23,7 @@ jobs:
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
- name: Setup cosign - name: Setup cosign
uses: sigstore/cosign-installer@v3.5.0 uses: sigstore/cosign-installer@v4.1.2
- name: Validate bootstrap - name: Validate bootstrap
run: | run: |
@ -250,7 +250,7 @@ jobs:
needs: [bootstrap, publish-linux, package-windows] needs: [bootstrap, publish-linux, package-windows]
steps: steps:
- name: Setup cosign - name: Setup cosign
uses: sigstore/cosign-installer@v3.5.0 uses: sigstore/cosign-installer@v4.1.2
- name: Download all artifacts - name: Download all artifacts
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1