chore(deps): update oras-project/setup-oras action to v2

.gitea/workflows/artifacthub-metadata.yaml

@@ -20,7 +20,7 @@ jobs:
       with:
         username: ${{ secrets.DOCKER_IO_USERNAME }}
         password: ${{ secrets.DOCKER_IO_PASSWORD }}
-    - uses: oras-project/setup-oras@v1.2.4
+    - uses: oras-project/setup-oras@v2.0.0
       with:
         version: 1.3.2 # renovate: datasource=github-tags depName=oras-project/oras extractVersion='^v?(?<version>.*)$'
     - name: Push artifacthub-repo.yml to git.cryptic.systems

.gitea/workflows/release.yaml

@@ -33,7 +33,7 @@ jobs:
         rm syft_${SYFT_VERSION}_${OS}_${ARCH}.deb
     - uses: sigstore/cosign-installer@v4.1.1
       with:
-        cosign-release: "v3.0.6" # renovate: datasource=github-tags depName=sigstore/cosign
+        cosign-release: "v2.6.3" # renovate: datasource=github-tags depName=sigstore/cosign
     - uses: docker/setup-qemu-action@v4.0.0
       with:
         image: harbor.cryptic.systems/docker/tonistiigi/binfmt:latest