chore: update cosign

Signed-off-by: Todd Baert <todd.baert@dynatrace.com>

Author: toddbaert

.github/workflows/release-please.yml

@@ -92,13 +92,13 @@ jobs:
 
 
       - name: Install cosign
-        uses: sigstore/cosign-installer@main
+        uses: sigstore/cosign-installer@cad07c2e89fa2edd6e2d7bab4c1aa38e53f76003 # v4
         with:
-          cosign-release: 'v1.13.0'
+          cosign-release: 'v2.6.0'
 
       - name: Sign release image
         run: |
-          cosign sign --key env://COSIGN_PRIVATE_KEY ghcr.io/open-feature/open-feature-operator:${{ needs.release-please.outputs.release_tag_name }}
+          cosign sign --yes --key env://COSIGN_PRIVATE_KEY ghcr.io/open-feature/open-feature-operator:${{ needs.release-please.outputs.release_tag_name }}
           # Displays the public key to share.
           cosign public-key --key env://COSIGN_PRIVATE_KEY > ./cosign.pub
         env: