cluster.meta

Issues/PRs archive for MTRNord/cluster
git clone git://archive.git.mtrnord.blog/MTRNord/cluster.meta.git
Log | Files | Refs

123.md (3053B)

      1 # PR #123 chore(deps): update sigstore/cosign-installer action to v4 - autoclosed
      2 
      3 - **Status:** closed
      4 - **Author:** @renovate[bot]
      5 - **Created:** 2026-03-25T20:18:03Z
      6 - **Branch:** renovate/major-github-actions → main
      7 - **Closed:** 2026-03-25T23:09:16Z
      8 - **Labels:** type/major-update
      9 - **Diff:** [123.diff](./123.diff)
     10 
     11 ---
     12 
     13 This PR contains the following updates:
     14 
     15 | Package | Type | Update | Change |
     16 |---|---|---|---|
     17 | [sigstore/cosign-installer](https://redirect.github.com/sigstore/cosign-installer) | action | major | `v3.10.1` → `v4.1.0` |
     18 
     19 ---
     20 
     21 ### Release Notes
     22 
     23 <details>
     24 <summary>sigstore/cosign-installer (sigstore/cosign-installer)</summary>
     25 
     26 ### [`v4.1.0`](https://redirect.github.com/sigstore/cosign-installer/releases/tag/v4.1.0)
     27 
     28 [Compare Source](https://redirect.github.com/sigstore/cosign-installer/compare/v4.0.0...v4.1.0)
     29 
     30 #### What's Changed
     31 
     32 We recommend updating as soon as possible as this includes bug fixes for Cosign. We also recommend removing `with: cosign-release` and strongly discourage using `cosign-release` unless you have a specific reason to use an older version of Cosign.
     33 
     34 - Bump cosign to 3.0.5 in [#&#8203;220](https://redirect.github.com/sigstore/cosign-installer/pull/220)
     35 - fix: add retry to curl downloads for transient network failures in [#&#8203;210](https://redirect.github.com/sigstore/cosign-installer/pull/210)
     36 
     37 **Full Changelog**: <https://github.com/sigstore/cosign-installer/compare/v4.0.0...v4.1.0>
     38 
     39 ### [`v4.0.0`](https://redirect.github.com/sigstore/cosign-installer/releases/tag/v4.0.0)
     40 
     41 [Compare Source](https://redirect.github.com/sigstore/cosign-installer/compare/v3.10.1...v4.0.0)
     42 
     43 #### What's Changed?
     44 
     45 **Note:** You must upgrade to cosign-installer v4 if you want to install [Cosign v3+](https://blog.sigstore.dev/cosign-3-0-available/). You may still install Cosign v2.x with cosign-installer v4.
     46 
     47 In version v3+, using `cosign sign-blob` requires adding the `--bundle` flag which may require you to update your signing command.
     48 
     49 - Add support for Cosign v3 releases ([#&#8203;201](https://redirect.github.com/sigstore/cosign-installer/issues/201))
     50 
     51 </details>
     52 
     53 ---
     54 
     55 ### Configuration
     56 
     57 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
     58 
     59 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
     60 
     61 ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
     62 
     63 🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
     64 
     65 ---
     66 
     67  - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
     68 
     69 ---
     70 
     71 This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/MTRNord/cluster).
     72 <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42Ni40IiwidXBkYXRlZEluVmVyIjoiNDMuNjYuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsidHlwZS9tYWpvci11cGRhdGUiXX0=-->
     73 
     74 
     75 
     76 ## Comments
     77 
     78 ### @MTRNord — 2026-03-25T22:52:54Z
     79 
     80 Blocked on zot support for the newer format :(
     81