VersionControl:PRs/pickipedia-mcp/53

pickipedia-mcp#53: Bump sigstore/cosign-installer from 4.1.2 to 4.1.3

State	🟢 open
Worked on by	not said
Moods	not said
Deploy	not said
Branch	dependabot/github_actions/sigstore/cosign-installer-4.1.3 → master, by dependabot[bot]
Opened · last pushed	2026-11-08 13:52:21 · 2026-11-08 13:52:19

Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 4.1.2 to 4.1.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/sigstore/cosign-installer/releases">sigstore/cosign-installer's releases</a>.</em></p>
<blockquote>
<h2>v4.1.3</h2>
<h2>What's Changed</h2>
<ul>
<li>Bump Cosign to v3.1.4 (latest release) in <a href="https://redirect.github.com/sigstore/cosign-installer/pull/257">sigstore/cosign-installer#257</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/sigstore/cosign-installer/compare/v4.1.2...v4.1.3">https://github.com/sigstore/cosign-installer/compare/v4.1.2...v4.1.3</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/sigstore/cosign-installer/commit/756fe2d284c7292c4e9b62c8a28f1e5629c59532"><code>756fe2d</code></a> Bump Cosign to v3.1.4 (latest release) (<a href="https://redirect.github.com/sigstore/cosign-installer/issues/257">#257</a>)</li>
<li><a href="https://github.com/sigstore/cosign-installer/commit/b9c35392b7c1401bcc77d30c9b07cf4b1c7a7b07"><code>b9c3539</code></a> Bump actions/setup-go from 6.4.0 to 7.0.0 (<a href="https://redirect.github.com/sigstore/cosign-installer/issues/249">#249</a>)</li>
<li><a href="https://github.com/sigstore/cosign-installer/commit/84205a0ae0aa7e3c3263e83062bb19d7cee28ad4"><code>84205a0</code></a> close race on windows due to reusing filename (<a href="https://redirect.github.com/sigstore/cosign-installer/issues/253">#253</a>)</li>
<li><a href="https://github.com/sigstore/cosign-installer/commit/af595e623eec1ede52d6322f53b635d5def0a95a"><code>af595e6</code></a> Bump cosign to 3.1.3 (<a href="https://redirect.github.com/sigstore/cosign-installer/issues/252">#252</a>)</li>
<li><a href="https://github.com/sigstore/cosign-installer/commit/828df1e55de306ba29db814d6057ddae71883cda"><code>828df1e</code></a> fix: harden curl download retries against transient GitHub CDN 504s (<a href="https://redirect.github.com/sigstore/cosign-installer/issues/240">#240</a>)</li>
<li><a href="https://github.com/sigstore/cosign-installer/commit/874852de93c66509b01dc7cd80f7a5385182d017"><code>874852d</code></a> Bump actions/checkout from 6.0.2 to 7.0.1 (<a href="https://redirect.github.com/sigstore/cosign-installer/issues/250">#250</a>)</li>
<li><a href="https://github.com/sigstore/cosign-installer/commit/3094a48ba06382e0e6cfa5a4af4fcc55fc6942b9"><code>3094a48</code></a> wrap path in quotes for powershell (<a href="https://redirect.github.com/sigstore/cosign-installer/issues/246">#246</a>)</li>
<li><a href="https://github.com/sigstore/cosign-installer/commit/e246ae36201d24185fc8a2ffed4a58af6656f9a8"><code>e246ae3</code></a> test minimum of 1.26 given cosign requirement (<a href="https://redirect.github.com/sigstore/cosign-installer/issues/247">#247</a>)</li>
<li>See full diff in <a href="https://github.com/sigstore/cosign-installer/compare/v4.1.2...v4.1.3">compare view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=sigstore/cosign-installer&package-manager=github_actions&previous-version=4.1.2&new-version=4.1.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)


</details>