From fe618af7f4fea5241342871073a1fee099e99cad Mon Sep 17 00:00:00 2001
From: "cluster-stack-bot[bot]"
 <143188378+cluster-stack-bot[bot]@users.noreply.github.com>
Date: Thu, 1 May 2025 11:21:11 +0000
Subject: [PATCH] :seedling: Update github-actions group

| datasource  | package                   | from     | to       |
| ----------- | ------------------------- | -------- | -------- |
| github-tags | renovatebot/github-action | v41.0.18 | v41.0.22 |
| github-tags | sigstore/cosign-installer | v3.8.1   | v3.8.2   |
---
 .builder-image-version.txt                 | 2 +-
 .github/workflows/build.yml                | 2 +-
 .github/workflows/pr-lint.yml              | 2 +-
 .github/workflows/release.yml              | 2 +-
 .github/workflows/schedule-scan-image.yml  | 2 +-
 .github/workflows/schedule-update-bot.yaml | 2 +-
 6 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/.builder-image-version.txt b/.builder-image-version.txt
index 63b41b20b..ad7bb75d2 100644
--- a/.builder-image-version.txt
+++ b/.builder-image-version.txt
@@ -1 +1 @@
-1.1.28
\ No newline at end of file
+1.1.29
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 31436f326..15387bbe9 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -54,7 +54,7 @@ jobs:
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Install Cosign
-        uses: sigstore/cosign-installer@d7d6bc7722e3daa8354c50bcb52f4837da5e9b6a # v3.8.1
+        uses: sigstore/cosign-installer@3454372f43399081ed03b604cb2d021dabca52bb # v3.8.2
 
       - name: Setup Env
         run: |
diff --git a/.github/workflows/pr-lint.yml b/.github/workflows/pr-lint.yml
index fd2e46ba0..d254787c9 100644
--- a/.github/workflows/pr-lint.yml
+++ b/.github/workflows/pr-lint.yml
@@ -21,7 +21,7 @@ jobs:
     if: github.event_name != 'pull_request' || !github.event.pull_request.draft
     runs-on: ubuntu-latest
     container:
-      image: ghcr.io/sovereigncloudstack/cso-builder:1.1.28
+      image: ghcr.io/sovereigncloudstack/cso-builder:1.1.29
       credentials:
         username: ${{ github.actor }}
         password: ${{ secrets.github_token }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index afa04eb90..4f7a42467 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -44,7 +44,7 @@ jobs:
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Install Cosign
-        uses: sigstore/cosign-installer@d7d6bc7722e3daa8354c50bcb52f4837da5e9b6a # v3.8.1
+        uses: sigstore/cosign-installer@3454372f43399081ed03b604cb2d021dabca52bb # v3.8.2
 
       - name: Install Bom
         shell: bash
diff --git a/.github/workflows/schedule-scan-image.yml b/.github/workflows/schedule-scan-image.yml
index 4d6192a7b..8b3989233 100644
--- a/.github/workflows/schedule-scan-image.yml
+++ b/.github/workflows/schedule-scan-image.yml
@@ -9,7 +9,7 @@ jobs:
     name: Trivy
     runs-on: ubuntu-latest
     container:
-      image: ghcr.io/sovereigncloudstack/cso-builder:1.1.28
+      image: ghcr.io/sovereigncloudstack/cso-builder:1.1.29
       credentials:
         username: ${{ github.actor }}
         password: ${{ secrets.github_token }}
diff --git a/.github/workflows/schedule-update-bot.yaml b/.github/workflows/schedule-update-bot.yaml
index 353688151..2306df218 100644
--- a/.github/workflows/schedule-update-bot.yaml
+++ b/.github/workflows/schedule-update-bot.yaml
@@ -45,7 +45,7 @@ jobs:
           echo "LOG_LEVEL=${{ github.event.inputs.logLevel || env.LOG_LEVEL }}" >> "$GITHUB_ENV"
 
       - name: Renovate
-        uses: renovatebot/github-action@c21017a4a2fc9f42953bcc907e375a5a544557ec # v41.0.18
+        uses: renovatebot/github-action@8ac70de2fe55752c573155866e30735411e3b61c # v41.0.22
         env:
           RENOVATE_HOST_RULES: '[{"hostType": "docker", "matchHost": "ghcr.io", "username": "${{ github.actor }}", "password": "${{ secrets.GITHUB_TOKEN }}" }]'
           RENOVATE_ALLOWED_POST_UPGRADE_COMMANDS: '[".*"]'