Merge pull request 'chore(deps): update dependency oras-project/oras to v1.3.6' (#292) from renovate/oras-project-oras-1.x into master

.gitea/workflows/artifacthub-metadata.yaml

@@ -11,18 +11,18 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-    - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
+    - uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4.7.0
       with:
         registry: ${{ github.server_url }}
         username: ${{ github.repository_owner }}
         password: ${{ secrets.GIT_CRYPTIC_SYSTEMS_PACKAGE_REGISTRY_TOKEN }}
-    - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
+    - uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4.7.0
       with:
         username: ${{ secrets.DOCKER_IO_USERNAME }}
         password: ${{ secrets.DOCKER_IO_PASSWORD }}
     - uses: oras-project/setup-oras@005458ad77f1c8facd38a094e4af2e69e5607ff4 # v2.0.2
       with:
-        version: 1.3.4 # renovate: datasource=github-tags depName=oras-project/oras extractVersion='^v?(?<version>.*)$'
+        version: 1.3.6 # renovate: datasource=github-tags depName=oras-project/oras extractVersion='^v?(?<version>.*)$'
     - name: Push artifacthub-repo.yml to git.cryptic.systems
       run: |
         oras push git.cryptic.systems/volker.raschek/db-wait:artifacthub.io \

.gitea/workflows/golang-linters.yaml

@@ -26,4 +26,4 @@ jobs:
         go-version: ${{ matrix.go }}
     - uses: golangci/golangci-lint-action@ba0d7d2ec06a0ea1cb5fa41b2e4a3ab91d21278a # v9.3.0
       with:
-        version: v2.14.0 # renovate: datasource=github-releases depName=golangci/golangci-lint
+        version: v2.15.0 # renovate: datasource=github-releases depName=golangci/golangci-lint

.gitea/workflows/release.yaml

@@ -19,7 +19,7 @@ jobs:
       run: apt-get update && apt-get install --yes curl
     - name: Install syft
       env:
-        SYFT_VERSION: "1.54.0" # renovate: datasource=github-releases depName=anchore/syft
+        SYFT_VERSION: "1.55.0" # renovate: datasource=github-releases depName=anchore/syft
       run: |
         OS="$(uname | tr '[:upper:]' '[:lower:]')"
         ARCH="$(dpkg --print-architecture)"
@@ -33,7 +33,7 @@ jobs:
         rm syft_${SYFT_VERSION}_${OS}_${ARCH}.deb
     - uses: volker-raschek/cosign-installer@7643eed6736a199595ed2a31e9979ec353a88adb # v4.1.3-rc3
       with:
-        cosign-release: "v3.1.3" # renovate: datasource=github-tags depName=sigstore/cosign
+        cosign-release: "v3.1.4" # renovate: datasource=github-tags depName=sigstore/cosign
     - uses: docker/setup-qemu-action@99012661954931238ded8c8b007157a8430204e1 # v4.4.0
       with:
         image: harbor.cryptic.systems/docker/tonistiigi/binfmt:latest
@@ -41,7 +41,7 @@ jobs:
     - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
       with:
         go-version: stable
-    - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
+    - uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4.7.0
       with:
         registry: git.cryptic.systems
         username: ${{ github.repository_owner }}
@@ -52,9 +52,9 @@ jobs:
         GITEA_TOKEN: ${{ secrets.GIT_CRYPTIC_SYSTEMS_PACKAGE_REGISTRY_TOKEN }}
         GONOSUMDB: ${{ vars.GONOSUMDB }}
         GOPROXY: ${{ vars.GOPROXY }}
-      uses: goreleaser/goreleaser-action@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94 # v7.2.3
+      uses: goreleaser/goreleaser-action@a4f02ab5355a589de60d917a659ce617ed19b3de # v7.3.0
       with:
-        version: v2.18.2 # renovate: datasource=github-releases depName=goreleaser/goreleaser
+        version: v2.19.0 # renovate: datasource=github-releases depName=goreleaser/goreleaser
         args: release --clean
 
   sync-to-hub-docker-io: