Skip to content

Update sigstore/cosign-installer action to v4.1.2 - #74

Closed
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/sigstore-cosign-installer-4.x
Closed

renovate[bot] wants to merge 1 commit into
mainfrom
renovate/sigstore-cosign-installer-4.x

Conversation

@renovate

@renovate renovate Bot commented Mar 9, 2026 •

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
sigstore/cosign-installer action minor v4.0.0 → v4.1.2

Release Notes

sigstore/cosign-installer (sigstore/cosign-installer)

v4.1.2

Compare Source

What's Changed

v4.1.1

Compare Source

What's Changed

  • chore: update default cosign-release to v3.0.5 in #​223

Full Changelog: sigstore/cosign-installer@v4.1.0...v4.1.1

v4.1.0

Compare Source

What's Changed

We recommend updating as soon as possible as this includes bug fixes for Cosign. We also recommend removing with: cosign-release and strongly discourage using cosign-release unless you have a specific reason to use an older version of Cosign.

  • Bump cosign to 3.0.5 in #​220
  • fix: add retry to curl downloads for transient network failures in #​210

Full Changelog: sigstore/cosign-installer@v4.0.0...v4.1.0


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot changed the title Update sigstore/cosign-installer action to v4.1.0 Update sigstore/cosign-installer action to v4.1.1 Apr 15, 2026
@renovate
renovate Bot force-pushed the renovate/sigstore-cosign-installer-4.x branch from 2920f4f to d189513 Compare April 15, 2026 20:01
@renovate renovate Bot changed the title Update sigstore/cosign-installer action to v4.1.1 Update sigstore/cosign-installer action to v4.1.2 May 7, 2026
@renovate
renovate Bot force-pushed the renovate/sigstore-cosign-installer-4.x branch from d189513 to 2b58f8b Compare May 7, 2026 18:40
@dedene

dedene commented Oct 22, 2026

Copy link
Copy Markdown
Member

Superseded by #80, which rolls up all action bumps and was verified with a full build and Trivy scan.

@dedene dedene closed this Oct 22, 2026
@dedene
dedene deleted the renovate/sigstore-cosign-installer-4.x branch October 22, 2026 07:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant