chore(deps): update sigstore/cosign-installer action to v4.1.0 #135

2026-03-09T21:11:02+01:00

CSRBot commented

2026-03-09 21:11:02 +01:00

This PR contains the following updates:

Package	Type	Update	Change
sigstore/cosign-installer	action	minor	`v4.0.0` -> `v4.1.0`

⚠️ Warning

Some dependencies could not be looked up. Check the warning logs for more information.

Release Notes

sigstore/cosign-installer (sigstore/cosign-installer)

`v4.1.0`

Compare Source

What's Changed

We recommend updating as soon as possible as this includes bug fixes for Cosign. We also recommend removing with: cosign-release and strongly discourage using cosign-release unless you have a specific reason to use an older version of Cosign.

Bump cosign to 3.0.5 in #220
fix: add retry to curl downloads for transient network failures in #210

Full Changelog: https://github.com/sigstore/cosign-installer/compare/v4.0.0...v4.1.0

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) | action | minor | `v4.0.0` -> `v4.1.0` | --- > ⚠️ **Warning** > > Some dependencies could not be looked up. Check the warning logs for more information. --- ### Release Notes <details> <summary>sigstore/cosign-installer (sigstore/cosign-installer)</summary> ### [`v4.1.0`](https://github.com/sigstore/cosign-installer/releases/tag/v4.1.0) [Compare Source](https://github.com/sigstore/cosign-installer/compare/v4.0.0...v4.1.0) #### What's Changed We recommend updating as soon as possible as this includes bug fixes for Cosign. We also recommend removing `with: cosign-release` and strongly discourage using `cosign-release` unless you have a specific reason to use an older version of Cosign. - Bump cosign to 3.0.5 in [#220](https://github.com/sigstore/cosign-installer/pull/220) - fix: add retry to curl downloads for transient network failures in [#210](https://github.com/sigstore/cosign-installer/pull/210) **Full Changelog**: <https://github.com/sigstore/cosign-installer/compare/v4.0.0...v4.1.0> </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).

CSRBot added 1 commit 2026-03-09 21:11:03 +01:00

chore(deps): update sigstore/cosign-installer action to v4.1.0

Helm / helm-lint (push) Successful in 6s

Details

Helm / helm-unittest (push) Successful in 10s

Details

Helm / helm-lint (pull_request) Successful in 5s

Details

Helm / helm-unittest (pull_request) Successful in 8s

Details

819a618c92

CSRBot requested review from volker.raschek 2026-03-09 21:11:03 +01:00

CSRBot scheduled this pull request to auto merge when all checks succeed 2026-03-09 21:11:05 +01:00

CSRBot merged commit 5d64ff0b74 into master

2026-03-09 21:11:37 +01:00

CSRBot deleted branch renovate/actions

2026-03-09 21:11:37 +01:00

CSRBot referenced this issue from a commit

2026-03-09 21:11:39 +01:00

Merge pull request 'chore(deps): update sigstore/cosign-installer action to v4.1.0' (#135) from renovate/actions into master

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: volker.raschek/prometheus-postgres-exporter#135