Skip to content

chore(deps): update sigstore/cosign-installer action ( v3.10.1 → v4.0.0 ) - #49

Merged
volschin merged 1 commit into
mainfrom
renovate/sigstore-cosign-installer-4.x
Jan 5, 2026
Merged

chore(deps): update sigstore/cosign-installer action ( v3.10.1 → v4.0.0 )#49
volschin merged 1 commit into
mainfrom
renovate/sigstore-cosign-installer-4.x

Conversation

@renovate

@renovate renovate Bot commented Oct 16, 2025

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change OpenSSF
sigstore/cosign-installer action major v3.10.1 -> v4.0.0 OpenSSF Scorecard

Release Notes

sigstore/cosign-installer (sigstore/cosign-installer)

v4.0.0

Compare Source

What's Changed?

Note: You must upgrade to cosign-installer v4 if you want to install Cosign v3+. You may still install Cosign v2.x with cosign-installer v4.

In version v3+, using cosign sign-blob requires adding the --bundle flag which may require you to update your signing command.

  • Add support for Cosign v3 releases (#​201)

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot force-pushed the renovate/sigstore-cosign-installer-4.x branch from a783c72 to 91df84a Compare November 10, 2025 13:34
@renovate
renovate Bot force-pushed the renovate/sigstore-cosign-installer-4.x branch from 91df84a to f5287c1 Compare December 15, 2025 14:52
@volschin
volschin merged commit 47ea3c1 into main Jan 5, 2026
4 of 5 checks passed
@volschin
volschin deleted the renovate/sigstore-cosign-installer-4.x branch January 5, 2026 08:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant