chore(deps): update dependency sigstore/cosign to v3

.gitea/workflows/release.yaml

@@ -33,7 +33,7 @@ jobs:
         rm syft_${SYFT_VERSION}_${OS}_${ARCH}.deb
     - uses: sigstore/cosign-installer@v4.0.0
       with:
-        cosign-release: "v2.6.2" # renovate: datasource=github-tags depName=sigstore/cosign
+        cosign-release: "v3.0.5" # renovate: datasource=github-tags depName=sigstore/cosign
     - uses: docker/setup-qemu-action@v3.7.0
     - uses: docker/setup-buildx-action@v3.12.0
     - uses: actions/setup-go@v6.2.0
@@ -50,7 +50,7 @@ jobs:
         GITEA_TOKEN: ${{ secrets.GIT_CRYPTIC_SYSTEMS_PACKAGE_REGISTRY_TOKEN }}
         GONOSUMDB: ${{ vars.GONOSUMDB }}
         GOPROXY: ${{ vars.GOPROXY }}
-      uses: goreleaser/goreleaser-action@v7.0.0
+      uses: goreleaser/goreleaser-action@v6.4.0
       with:
         version: v2.14.0 # renovate: datasource=github-releases depName=goreleaser/goreleaser
         args: release --clean