From 233ba2432ac33e97873eba35fd1bc5a441777172 Mon Sep 17 00:00:00 2001
From: "uniproject-renovate[bot]"
 <254712713+uniproject-renovate[bot]@users.noreply.github.com>
Date: Fri, 2 Oct 2026 09:57:04 +0000
Subject: [PATCH] deps(deps): update sigstore/cosign-installer action to v4

---
 .github/workflows/docker-tag.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/docker-tag.yaml b/.github/workflows/docker-tag.yaml
index b45556a..04a82ba 100644
--- a/.github/workflows/docker-tag.yaml
+++ b/.github/workflows/docker-tag.yaml
@@ -51,7 +51,7 @@ jobs:
           cache-to: type=registry,ref=registry.uniproject.jp/official/analyze-bot:buildcache,mode=max
 
       - name: Install Cosign
-        uses: sigstore/cosign-installer@398d4b0eeef1380460a10c8013a76f728fb906ac # v3
+        uses: sigstore/cosign-installer@6f9f17788090df1f26f669e9d70d6ae9567deba6 # v4.1.2
 
       - name: Set up QEMU
         uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4