Skip to content

ci(deps): bump sigstore/cosign-installer from 3.8.1 to 4.1.3 - #44

Merged
divyanshujethi merged 2 commits into
mainfrom
dependabot/github_actions/sigstore/cosign-installer-4.1.3
Nov 12, 2026
Merged

divyanshujethi merged 2 commits into
mainfrom
dependabot/github_actions/sigstore/cosign-installer-4.1.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 9, 2026 •

Copy link
Copy Markdown
Contributor

Bumps sigstore/cosign-installer from 3.8.1 to 4.1.3.

Release notes

Sourced from sigstore/cosign-installer's releases.

v4.1.3

What's Changed

Full Changelog: sigstore/cosign-installer@v4.1.2...v4.1.3

v4.1.2

What's Changed

v4.1.1

What's Changed

Full Changelog: sigstore/cosign-installer@v4.1.0...v4.1.1

v4.1.0

What's Changed

We recommend updating as soon as possible as this includes bug fixes for Cosign. We also recommend removing with: cosign-release and strongly discourage using cosign-release unless you have a specific reason to use an older version of Cosign.

Full Changelog: sigstore/cosign-installer@v4.0.0...v4.1.0

v4.0.0

What's Changed?

Note: You must upgrade to cosign-installer v4 if you want to install Cosign v3+. You may still install Cosign v2.x with cosign-installer v4.

In version v3+, using cosign sign-blob requires adding the --bundle flag which may require you to update your signing command.

  • Add support for Cosign v3 releases (#201)

v3.10.1

What's Changed?

Note: cosign-installer v3.x cannot be used to install Cosign v3.x. You must upgrade to cosign-installer v4 in order to use Cosign v3.

Note: This is planned to be the final release of Cosign v2, though we will cut new releases for any critical security or bug fixes. We recommend transitioning to Cosign v3.

  • Bump default Cosign to v2.6.1 (#203)

v3.10.0

What's Changed

Full Changelog: sigstore/cosign-installer@v3.9.2...v3.10.0

... (truncated)

Commits

@dependabot @github

dependabot Bot commented on behalf of github Nov 9, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies, github-actions. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot
dependabot Bot force-pushed the dependabot/github_actions/sigstore/cosign-installer-4.1.3 branch 7 times, most recently from ec01e99 to f8a2457 Compare November 12, 2026 21:17
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 3.8.1 to 4.1.3.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](sigstore/cosign-installer@d7d6bc7...756fe2d)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-version: 4.1.3
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/sigstore/cosign-installer-4.1.3 branch from f8a2457 to 129df46 Compare November 12, 2026 21:19
@divyanshujethi
divyanshujethi merged commit b65034b into main Nov 12, 2026
8 checks passed
@dependabot
dependabot Bot deleted the dependabot/github_actions/sigstore/cosign-installer-4.1.3 branch November 12, 2026 21:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant