dependabot[bot]
2025-05-07 c33f96e572d7fd4e15d24f9f527fc9f39aebbaa7
chore(deps): bump sigstore/cosign-installer in the ci-dependencies group (#1953)

Bumps the ci-dependencies group with 1 update: [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer).


Updates `sigstore/cosign-installer` from 3.8.1 to 3.8.2
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](https://github.com/sigstore/cosign-installer/compare/v3.8.1...v3.8.2)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
dependency-version: 3.8.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: ci-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 files modified
2 ■■■ changed files
.github/workflows/docker-build-push.yaml 2 ●●● patch | view | raw | blame | history
.github/workflows/docker-build-push.yaml
@@ -37,7 +37,7 @@
            network=host
      - name: Install cosign
        if: github.event_name != 'pull_request'
        uses: sigstore/cosign-installer@v3.8.1
        uses: sigstore/cosign-installer@v3.8.2
      - name: Login to GitHub Container Registry
        uses: docker/login-action@v3
        if: github.event_name != 'pull_request'