chore(deps): update docker/login-action action to v4

.gitea/workflows/artifacthub-metadata.yaml

@@ -11,15 +11,12 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v6.0.2
-    - uses: sigstore/cosign-installer@v4.0.0
+    - uses: docker/login-action@v4.0.0
       with:
-        cosign-release: "v3.0.4" # renovate: datasource=github-tags depName=sigstore/cosign
+        registry: ${{ github.server_url }}
-    - uses: docker/login-action@v3.7.0
-      with:
-        registry: git.cryptic.systems
         username: ${{ github.repository_owner }}
         password: ${{ secrets.GIT_CRYPTIC_SYSTEMS_PACKAGE_REGISTRY_TOKEN }}
-    - uses: docker/login-action@v3.7.0
+    - uses: docker/login-action@v4.0.0
       with:
         username: ${{ secrets.DOCKER_IO_USERNAME }}
         password: ${{ secrets.DOCKER_IO_PASSWORD }}
@@ -38,6 +35,7 @@ jobs:
         echo "${COSIGN_PUBLIC_KEY}" > cosign.pub
         oras push git.cryptic.systems/volker.raschek/dcmerge:cosign.pub \
           --artifact-type application/vnd.dev.cosign.public-key.v1 \
+          --annotation org.opencontainers.image.title=cosign.pub \
           cosign.pub:application/vnd.dev.cosign.public-key.v1
 
     - name: Push artifacthub-repo.yml to docker.io
@@ -52,4 +50,4 @@ jobs:
         echo "${COSIGN_PUBLIC_KEY}" > cosign.pub
         oras push docker.io/volkerraschek/dcmerge:cosign.pub \
           --artifact-type application/vnd.dev.cosign.public-key.v1 \
-          cosign.pub:application/vnd.dev.cosign.public-key.v1
+          cosign.pub:application/vnd.dev.cosign.public-key.v1

.gitea/workflows/golang-linters.yaml

@@ -21,9 +21,9 @@ jobs:
         os: [ ubuntu-latest-amd64, ubuntu-latest-arm64 ]
     steps:
     - uses: actions/checkout@v6.0.2
-    - uses: actions/setup-go@v6.2.0
+    - uses: actions/setup-go@v6.3.0
       with:
         go-version: ${{ matrix.go }}
     - uses: golangci/golangci-lint-action@v9.2.0
       with:
-        version: v2.8.0 # renovate: datasource=github-releases depName=golangci/golangci-lint
+        version: v2.9.0 # renovate: datasource=github-releases depName=golangci/golangci-lint

.gitea/workflows/golang-tests.yaml

@@ -34,7 +34,7 @@ jobs:
         os: [ ubuntu-latest-amd64, ubuntu-latest-arm64 ]
     steps:
     - uses: actions/checkout@v6.0.2
-    - uses: actions/setup-go@v6.2.0
+    - uses: actions/setup-go@v6.3.0
       with:
         go-version: ${{ matrix.go }}
     - env:

.gitea/workflows/release.yaml

@@ -33,13 +33,13 @@ jobs:
         rm syft_${SYFT_VERSION}_${OS}_${ARCH}.deb
     - uses: sigstore/cosign-installer@v4.0.0
       with:
-        cosign-release: "v3.0.4" # renovate: datasource=github-tags depName=sigstore/cosign
+        cosign-release: "v2.6.2" # renovate: datasource=github-tags depName=sigstore/cosign
     - uses: docker/setup-qemu-action@v3.7.0
     - uses: docker/setup-buildx-action@v3.12.0
-    - uses: actions/setup-go@v6.2.0
+    - uses: actions/setup-go@v6.3.0
       with:
         go-version: stable
-    - uses: docker/login-action@v3.7.0
+    - uses: docker/login-action@v4.0.0
       with:
         registry: git.cryptic.systems
         username: ${{ github.repository_owner }}
@@ -50,9 +50,9 @@ jobs:
         GITEA_TOKEN: ${{ secrets.GIT_CRYPTIC_SYSTEMS_PACKAGE_REGISTRY_TOKEN }}
         GONOSUMDB: ${{ vars.GONOSUMDB }}
         GOPROXY: ${{ vars.GOPROXY }}
-      uses: goreleaser/goreleaser-action@v6.4.0
+      uses: goreleaser/goreleaser-action@v7.0.0
       with:
-        version: v2.13.3 # renovate: datasource=github-releases depName=goreleaser/goreleaser
+        version: v2.14.1 # renovate: datasource=github-releases depName=goreleaser/goreleaser
         args: release --clean
 
   sync-to-hub-docker-io:
@@ -72,6 +72,6 @@ jobs:
           --dest-password ${{ secrets.DOCKER_IO_PASSWORD }} \
           --dest-username ${{ secrets.DOCKER_IO_USERNAME }} \
           --src-password ${{ secrets.GIT_CRYPTIC_SYSTEMS_PACKAGE_REGISTRY_TOKEN }} \
-          --src-username volker.raschek \
+          --src-username ${{ github.repository_owner }} \
             docker://git.cryptic.systems/volker.raschek/dcmerge:${TAG} \
             docker://docker.io/volkerraschek/dcmerge:${TAG}

.goreleaser.yaml

@@ -334,7 +334,6 @@ docker_signs:
   - "sign"
   - "--key=env://COSIGN_PRIVATE_KEY"
   - "--yes"
-  - "--registry-referrers-mode=legacy"
   - "${artifact}@${digest}"
 
   # Which artifacts to sign.
@@ -346,7 +345,7 @@ docker_signs:
   #   '':        images built by dockers_v2
   #
   # Default: ''.
-  artifacts: all
+  artifacts: manifests
 
   # IDs of the artifacts to sign.
   ids: