dependabot[bot]
2025-07-08 eceefd1d848de40752421f8723ff0782c7956785
chore(deps): bump sigstore/cosign-installer in the ci-dependencies group (#2028)

Bumps the ci-dependencies group with 1 update: [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer).


Updates `sigstore/cosign-installer` from 3.8.2 to 3.9.1
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](https://github.com/sigstore/cosign-installer/compare/v3.8.2...v3.9.1)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
dependency-version: 3.9.1
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: ci-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 files modified
2 ■■■ changed files
.github/workflows/docker-build-push.yaml 2 ●●● patch | view | raw | blame | history
.github/workflows/docker-build-push.yaml
@@ -37,7 +37,7 @@
            network=host
      - name: Install cosign
        if: github.event_name != 'pull_request'
        uses: sigstore/cosign-installer@v3.8.2
        uses: sigstore/cosign-installer@v3.9.1
      - name: Login to GitHub Container Registry
        uses: docker/login-action@v3
        if: github.event_name != 'pull_request'