Skip to content

chore: update default cosign-release to v3.0.5#223

Merged
Hayden-IO merged 1 commit intosigstore:mainfrom
rsclarke:chore/update-default-cosign-release-to-v3.0.5
Mar 26, 2026
Merged

chore: update default cosign-release to v3.0.5#223
Hayden-IO merged 1 commit intosigstore:mainfrom
rsclarke:chore/update-default-cosign-release-to-v3.0.5

Conversation

@rsclarke
Copy link
Copy Markdown
Contributor

Summary

Aligns the default cosign-release input with the bootstrap version, otherwise performs unnecessary fetch.

Release Note

  • Updates default cosign-release to v3.0.5

Documentation

N/A

Aligns the default cosign-release input with the bootstrap version.

Signed-off-by: rsclarke <[email protected]>
@rsclarke rsclarke force-pushed the chore/update-default-cosign-release-to-v3.0.5 branch from b55bf50 to 8be4a60 Compare March 21, 2026 07:02
@rsclarke
Copy link
Copy Markdown
Contributor Author

@jku @Hayden-IO #220 Bumped the bootstrap version, however the default to install remained at v3.0.3. Because these differ the installer fetches and installs v3.0.3. Updating the default input variable to the same as the bootstrap avoids this unnecessary fetch.

@Hayden-IO Hayden-IO merged commit cad07c2 into sigstore:main Mar 26, 2026
115 checks passed
renovate Bot added a commit to sdwilsh/sOS that referenced this pull request Mar 26, 2026
##### [\`v4.1.1\`](https://github.com/sigstore/cosign-installer/releases/tag/v4.1.1)

#### What's Changed

- chore: update default cosign-release to v3.0.5 in [#223](sigstore/cosign-installer#223)

**Full Changelog**: <sigstore/cosign-installer@v4.1.0...v4.1.1>

---
##### [\`v4.1.0\`](https://github.com/sigstore/cosign-installer/releases/tag/v4.1.0)

#### What's Changed

We recommend updating as soon as possible as this includes bug fixes for Cosign. We also recommend removing `with: cosign-release` and strongly discourage using `cosign-release` unless you have a specific reason to use an older version of Cosign.

- Bump cosign to 3.0.5 in [#220](sigstore/cosign-installer#220)
- fix: add retry to curl downloads for transient network failures in [#210](sigstore/cosign-installer#210)

**Full Changelog**: <sigstore/cosign-installer@v4.0.0...v4.1.0>
@rsclarke rsclarke deleted the chore/update-default-cosign-release-to-v3.0.5 branch March 26, 2026 05:37
renovate Bot added a commit to sdwilsh/ansible-playbooks that referenced this pull request Mar 26, 2026
##### [\`v4.1.1\`](https://github.com/sigstore/cosign-installer/releases/tag/v4.1.1)

#### What's Changed

- chore: update default cosign-release to v3.0.5 in [#223](sigstore/cosign-installer#223)

**Full Changelog**: <sigstore/cosign-installer@v4.1.0...v4.1.1>

---
##### [\`v4.1.0\`](https://github.com/sigstore/cosign-installer/releases/tag/v4.1.0)

#### What's Changed

We recommend updating as soon as possible as this includes bug fixes for Cosign. We also recommend removing `with: cosign-release` and strongly discourage using `cosign-release` unless you have a specific reason to use an older version of Cosign.

- Bump cosign to 3.0.5 in [#220](sigstore/cosign-installer#220)
- fix: add retry to curl downloads for transient network failures in [#210](sigstore/cosign-installer#210)

**Full Changelog**: <sigstore/cosign-installer@v4.0.0...v4.1.0>
@jku
Copy link
Copy Markdown
Member

jku commented Mar 26, 2026

thanks, that was my bad.

Some notes:

  • we really need to automate this, the update process is horrible
  • separate default version and bootstrap version makes no sense: why would we ever want different values?

@jku jku mentioned this pull request Mar 26, 2026
renovate Bot added a commit to sdwilsh/ansible-playbooks that referenced this pull request Mar 26, 2026
##### [\`v4.1.1\`](https://github.com/sigstore/cosign-installer/releases/tag/v4.1.1)

#### What's Changed

- chore: update default cosign-release to v3.0.5 in [#223](sigstore/cosign-installer#223)

**Full Changelog**: <sigstore/cosign-installer@v4.1.0...v4.1.1>

---
##### [\`v4.1.0\`](https://github.com/sigstore/cosign-installer/releases/tag/v4.1.0)

#### What's Changed

We recommend updating as soon as possible as this includes bug fixes for Cosign. We also recommend removing `with: cosign-release` and strongly discourage using `cosign-release` unless you have a specific reason to use an older version of Cosign.

- Bump cosign to 3.0.5 in [#220](sigstore/cosign-installer#220)
- fix: add retry to curl downloads for transient network failures in [#210](sigstore/cosign-installer#210)

**Full Changelog**: <sigstore/cosign-installer@v4.0.0...v4.1.0>
sdwilsh pushed a commit to sdwilsh/ansible-playbooks that referenced this pull request Mar 27, 2026
##### [\`v4.1.1\`](https://github.com/sigstore/cosign-installer/releases/tag/v4.1.1)

#### What's Changed

- chore: update default cosign-release to v3.0.5 in [#223](sigstore/cosign-installer#223)

**Full Changelog**: <sigstore/cosign-installer@v4.1.0...v4.1.1>

---
##### [\`v4.1.0\`](https://github.com/sigstore/cosign-installer/releases/tag/v4.1.0)

#### What's Changed

We recommend updating as soon as possible as this includes bug fixes for Cosign. We also recommend removing `with: cosign-release` and strongly discourage using `cosign-release` unless you have a specific reason to use an older version of Cosign.

- Bump cosign to 3.0.5 in [#220](sigstore/cosign-installer#220)
- fix: add retry to curl downloads for transient network failures in [#210](sigstore/cosign-installer#210)

**Full Changelog**: <sigstore/cosign-installer@v4.0.0...v4.1.0>
renovate Bot added a commit to sdwilsh/sOS that referenced this pull request Apr 3, 2026
##### [\`v4.1.1\`](https://github.com/sigstore/cosign-installer/releases/tag/v4.1.1)

#### What's Changed

- chore: update default cosign-release to v3.0.5 in [#223](sigstore/cosign-installer#223)

**Full Changelog**: <sigstore/cosign-installer@v4.1.0...v4.1.1>

---
##### [\`v4.1.0\`](https://github.com/sigstore/cosign-installer/releases/tag/v4.1.0)

#### What's Changed

We recommend updating as soon as possible as this includes bug fixes for Cosign. We also recommend removing `with: cosign-release` and strongly discourage using `cosign-release` unless you have a specific reason to use an older version of Cosign.

- Bump cosign to 3.0.5 in [#220](sigstore/cosign-installer#220)
- fix: add retry to curl downloads for transient network failures in [#210](sigstore/cosign-installer#210)

**Full Changelog**: <sigstore/cosign-installer@v4.0.0...v4.1.0>
renovate Bot added a commit to sdwilsh/sOS that referenced this pull request Apr 10, 2026
##### [\`v4.1.1\`](https://github.com/sigstore/cosign-installer/releases/tag/v4.1.1)

#### What's Changed

- chore: update default cosign-release to v3.0.5 in [#223](sigstore/cosign-installer#223)

**Full Changelog**: <sigstore/cosign-installer@v4.1.0...v4.1.1>

---
##### [\`v4.1.0\`](https://github.com/sigstore/cosign-installer/releases/tag/v4.1.0)

#### What's Changed

We recommend updating as soon as possible as this includes bug fixes for Cosign. We also recommend removing `with: cosign-release` and strongly discourage using `cosign-release` unless you have a specific reason to use an older version of Cosign.

- Bump cosign to 3.0.5 in [#220](sigstore/cosign-installer#220)
- fix: add retry to curl downloads for transient network failures in [#210](sigstore/cosign-installer#210)

**Full Changelog**: <sigstore/cosign-installer@v4.0.0...v4.1.0>
renovate Bot added a commit to sdwilsh/sOS that referenced this pull request Apr 17, 2026
##### [\`v4.1.1\`](https://github.com/sigstore/cosign-installer/releases/tag/v4.1.1)

#### What's Changed

- chore: update default cosign-release to v3.0.5 in [#223](sigstore/cosign-installer#223)

**Full Changelog**: <sigstore/cosign-installer@v4.1.0...v4.1.1>

---
##### [\`v4.1.0\`](https://github.com/sigstore/cosign-installer/releases/tag/v4.1.0)

#### What's Changed

We recommend updating as soon as possible as this includes bug fixes for Cosign. We also recommend removing `with: cosign-release` and strongly discourage using `cosign-release` unless you have a specific reason to use an older version of Cosign.

- Bump cosign to 3.0.5 in [#220](sigstore/cosign-installer#220)
- fix: add retry to curl downloads for transient network failures in [#210](sigstore/cosign-installer#210)

**Full Changelog**: <sigstore/cosign-installer@v4.0.0...v4.1.0>
renovate Bot added a commit to sdwilsh/sOS that referenced this pull request Apr 24, 2026
##### [\`v4.1.1\`](https://github.com/sigstore/cosign-installer/releases/tag/v4.1.1)

#### What's Changed

- chore: update default cosign-release to v3.0.5 in [#223](sigstore/cosign-installer#223)

**Full Changelog**: <sigstore/cosign-installer@v4.1.0...v4.1.1>

---
##### [\`v4.1.0\`](https://github.com/sigstore/cosign-installer/releases/tag/v4.1.0)

#### What's Changed

We recommend updating as soon as possible as this includes bug fixes for Cosign. We also recommend removing `with: cosign-release` and strongly discourage using `cosign-release` unless you have a specific reason to use an older version of Cosign.

- Bump cosign to 3.0.5 in [#220](sigstore/cosign-installer#220)
- fix: add retry to curl downloads for transient network failures in [#210](sigstore/cosign-installer#210)

**Full Changelog**: <sigstore/cosign-installer@v4.0.0...v4.1.0>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants