chore(deps): update dependency sigstore/cosign to v3.0.4

.gitea/workflows/artifacthub-metadata.yaml

@@ -38,7 +38,6 @@ jobs:
         echo "${COSIGN_PUBLIC_KEY}" > cosign.pub
         oras push git.cryptic.systems/volker.raschek/dcmerge:cosign.pub \
           --artifact-type application/vnd.dev.cosign.public-key.v1 \
-          --annotation org.opencontainers.image.title=cosign.pub \
           cosign.pub:application/vnd.dev.cosign.public-key.v1
 
     - name: Push artifacthub-repo.yml to docker.io

.gitea/workflows/release.yaml

@@ -72,6 +72,6 @@ jobs:
           --dest-password ${{ secrets.DOCKER_IO_PASSWORD }} \
           --dest-username ${{ secrets.DOCKER_IO_USERNAME }} \
           --src-password ${{ secrets.GIT_CRYPTIC_SYSTEMS_PACKAGE_REGISTRY_TOKEN }} \
-          --src-username ${{ github.repository_owner }} \
+          --src-username volker.raschek \
             docker://git.cryptic.systems/volker.raschek/dcmerge:${TAG} \
             docker://docker.io/volkerraschek/dcmerge:${TAG}

.goreleaser.yaml

@@ -334,6 +334,7 @@ docker_signs:
   - "sign"
   - "--key=env://COSIGN_PRIVATE_KEY"
   - "--yes"
+  - "--registry-referrers-mode=legacy"
   - "${artifact}@${digest}"
 
   # Which artifacts to sign.
@@ -345,7 +346,7 @@ docker_signs:
   #   '':        images built by dockers_v2
   #
   # Default: ''.
-  artifacts: manifests
+  artifacts: all
 
   # IDs of the artifacts to sign.
   ids: