Merge pull request #417 from matheuscscp/dependabot/project-526c78c865

Bump the "project" group with 2 updates across multiple ecosystems

Author: matheuscscp

.github/workflows/release.yml

@@ -56,8 +56,10 @@ jobs:
     - uses: ./.github/actions/ci-checks/
       if: steps.check-new-releases.outputs.new-releases == 'yes'
 
-    - uses: sigstore/cosign-installer@v3.10.0
+    - uses: sigstore/cosign-installer@v4.0.0
       if: steps.check-new-releases.outputs.new-releases == 'yes'
+      with:
+        cosign-release: v2.6.1 # TODO: remove after Flux 2.8 with support for cosign v3
 
     - name: Release Container in GitHub Container Registry
       id: release-container-ghcr

Dockerfile

@@ -20,7 +20,7 @@
 # OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 # SOFTWARE.
 
-FROM golang:1.25.2-alpine3.21 AS builder
+FROM golang:1.25.3-alpine3.21 AS builder
 
 RUN apk add --no-cache clang llvm bpftool libbpf-dev
 

Dockerfile.test

@@ -21,7 +21,7 @@
 # SOFTWARE.
 
 # Build stage
-FROM golang:1.25.2-alpine3.21 AS builder
+FROM golang:1.25.3-alpine3.21 AS builder
 
 RUN apk add --no-cache clang llvm bpftool libbpf-dev