chore(deps): update dependency sigstore/cosign to v3

.gitea/workflows/artifacthub-metadata.yaml

@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v6.0.2
-    - uses: docker/login-action@v4.0.0
+    - uses: docker/login-action@v3.7.0
       with:
         registry: ${{ github.server_url }}
         username: ${{ github.repository_owner }}

.gitea/workflows/generate-readme.yaml

@@ -15,7 +15,7 @@ on:
 jobs:
   generate-parameters:
     container:
-      image: docker.io/library/node:25.8.0-alpine
+      image: docker.io/library/node:25.7.0-alpine
     runs-on: ubuntu-latest
     steps:
     - name: Install tooling

.gitea/workflows/markdown-linters.yaml

@@ -15,7 +15,7 @@ on:
 jobs:
   markdown-link-checker:
     container:
-      image: docker.io/library/node:25.8.0-alpine
+      image: docker.io/library/node:25.7.0-alpine
     runs-on: ubuntu-latest
     steps:
     - name: Install tooling
@@ -30,7 +30,7 @@ jobs:
 
   markdown-lint:
     container:
-      image: docker.io/library/node:25.8.0-alpine
+      image: docker.io/library/node:25.7.0-alpine
     runs-on: ubuntu-latest
     steps:
     - name: Install tooling

.gitea/workflows/release.yaml

@@ -16,7 +16,7 @@ jobs:
     steps:
       - uses: sigstore/cosign-installer@v4.0.0
         with:
-          cosign-release: "v2.6.2" # renovate: datasource=github-tags depName=sigstore/cosign
+          cosign-release: "v3.0.5" # renovate: datasource=github-tags depName=sigstore/cosign
 
       - uses: azure/setup-helm@v4.3.1
         with:
@@ -95,7 +95,7 @@ jobs:
             --passphrase-file "${GPG_PRIVATE_KEY_PASSPHRASE_FILE}" \
             --version "${PACKAGE_VERSION}" ./
 
-      - uses: docker/login-action@v4.0.0
+      - uses: docker/login-action@v3.7.0
         with:
           registry: ${{ github.server_url }}
           username: ${{ github.repository_owner }}