Merge pull request 'chore(deps): update docker/login-action action to v4.2.0' (#169) from renovate/actions into master

.gitea/workflows/artifacthub-metadata.yaml

@@ -11,16 +11,16 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v6.0.2
-    - uses: docker/login-action@v4.1.0
+    - uses: docker/login-action@v4.2.0
       with:
         registry: ${{ github.server_url }}
         username: ${{ github.repository_owner }}
         password: ${{ secrets.GIT_CRYPTIC_SYSTEMS_PACKAGE_REGISTRY_TOKEN }}
-    - uses: docker/login-action@v4.1.0
+    - uses: docker/login-action@v4.2.0
       with:
         username: ${{ secrets.DOCKER_IO_USERNAME }}
         password: ${{ secrets.DOCKER_IO_PASSWORD }}
-    - uses: oras-project/setup-oras@v1.2.4
+    - uses: oras-project/setup-oras@v2.0.0
       with:
         version: 1.3.2 # renovate: datasource=github-tags depName=oras-project/oras extractVersion='^v?(?<version>.*)$'
     - name: Push artifacthub-repo.yml to git.cryptic.systems

.gitea/workflows/golang-linters.yaml

@@ -24,6 +24,6 @@ jobs:
     - uses: actions/setup-go@v6.4.0
       with:
         go-version: ${{ matrix.go }}
-    - uses: golangci/golangci-lint-action@v9.2.0
+    - uses: golangci/golangci-lint-action@v9.2.1
       with:
-        version: v2.12.0 # renovate: datasource=github-releases depName=golangci/golangci-lint
+        version: v2.12.2 # renovate: datasource=github-releases depName=golangci/golangci-lint

.gitea/workflows/release.yaml

@@ -31,9 +31,9 @@ jobs:
             "https://github.com/anchore/syft/releases/download/v${SYFT_VERSION}/syft_${SYFT_VERSION}_${OS}_${ARCH}.deb"
         dpkg -i syft_${SYFT_VERSION}_${OS}_${ARCH}.deb
         rm syft_${SYFT_VERSION}_${OS}_${ARCH}.deb
-    - uses: sigstore/cosign-installer@v4.1.1
+    - uses: volker-raschek/cosign-installer@v4.1.2-rc3
       with:
-        cosign-release: "v2.6.3" # renovate: datasource=github-tags depName=sigstore/cosign
+        cosign-release: "v3.0.6" # renovate: datasource=github-tags depName=sigstore/cosign
     - uses: docker/setup-qemu-action@v4.0.0
       with:
         image: harbor.cryptic.systems/docker/tonistiigi/binfmt:latest
@@ -41,7 +41,7 @@ jobs:
     - uses: actions/setup-go@v6.4.0
       with:
         go-version: stable
-    - uses: docker/login-action@v4.1.0
+    - uses: docker/login-action@v4.2.0
       with:
         registry: git.cryptic.systems
         username: ${{ github.repository_owner }}
@@ -52,7 +52,7 @@ jobs:
         GITEA_TOKEN: ${{ secrets.GIT_CRYPTIC_SYSTEMS_PACKAGE_REGISTRY_TOKEN }}
         GONOSUMDB: ${{ vars.GONOSUMDB }}
         GOPROXY: ${{ vars.GOPROXY }}
-      uses: goreleaser/goreleaser-action@v7.2.1
+      uses: goreleaser/goreleaser-action@v7.2.2
       with:
         version: v2.15.4 # renovate: datasource=github-releases depName=goreleaser/goreleaser
         args: release --clean

.gitignore

@@ -1,3 +1,4 @@
 dcmerge
+cosign.*
 coverage.*
 dist