Merge pull request #1061 from docker/test-sigstore-timeout

sigstore: wire tests to explicit cosign binaries
2026-04-08 12:25:19 +02:00 · 2026-04-08 12:15:42 +02:00 · 2026-04-08 09:06:25 +02:00 · 2026-04-07 16:41:12 +02:00 · 2026-04-07 14:58:56 +02:00 · 2026-04-07 12:30:30 +00:00
30 changed files with 1011 additions and 585 deletions
--- a/.github/buildx-releases.json
+++ b/.github/buildx-releases.json
@@ -1,76 +1,298 @@
 {
  "latest": {
-    "id": 293153745,
-    "tag_name": "v0.32.1",
-    "html_url": "https://github.com/docker/buildx/releases/tag/v0.32.1",
+    "id": 303766308,
+    "tag_name": "v0.33.0",
+    "html_url": "https://github.com/docker/buildx/releases/tag/v0.33.0",
    "assets": [
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.darwin-amd64",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.darwin-amd64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.darwin-amd64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.darwin-arm64",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.darwin-arm64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.darwin-arm64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.freebsd-amd64",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.freebsd-amd64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.freebsd-amd64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.freebsd-amd64.sigstore.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.freebsd-arm64",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.freebsd-arm64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.freebsd-arm64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.freebsd-arm64.sigstore.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-amd64",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-amd64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-amd64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-amd64.sigstore.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-arm-v6",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-arm-v6.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-arm-v6.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-arm-v6.sigstore.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-arm-v7",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-arm-v7.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-arm-v7.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-arm-v7.sigstore.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-arm64",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-arm64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-arm64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-arm64.sigstore.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-ppc64le",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-ppc64le.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-ppc64le.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-ppc64le.sigstore.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-riscv64",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-riscv64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-riscv64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-riscv64.sigstore.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-s390x",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-s390x.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-s390x.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-s390x.sigstore.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.netbsd-amd64",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.netbsd-amd64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.netbsd-amd64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.netbsd-amd64.sigstore.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.netbsd-arm64",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.netbsd-arm64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.netbsd-arm64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.netbsd-arm64.sigstore.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.openbsd-amd64",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.openbsd-amd64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.openbsd-amd64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.openbsd-amd64.sigstore.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.openbsd-arm64",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.openbsd-arm64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.openbsd-arm64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.openbsd-arm64.sigstore.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.windows-amd64.exe",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.windows-amd64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.windows-amd64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.windows-amd64.sigstore.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.windows-arm64.exe",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.windows-arm64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.windows-arm64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.windows-arm64.sigstore.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/checksums.txt"
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.darwin-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.darwin-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.freebsd-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.freebsd-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.freebsd-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.freebsd-amd64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.freebsd-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.freebsd-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.freebsd-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.freebsd-arm64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-amd64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm-v6",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm-v6.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm-v7",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm-v7.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-ppc64le",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-ppc64le.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-riscv64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-riscv64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-s390x",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-s390x.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.netbsd-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.netbsd-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.netbsd-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.netbsd-amd64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.netbsd-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.netbsd-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.netbsd-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.netbsd-arm64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.openbsd-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.openbsd-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.openbsd-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.openbsd-amd64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.openbsd-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.openbsd-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.openbsd-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.openbsd-arm64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.windows-amd64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.windows-amd64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.windows-arm64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.windows-arm64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/checksums.txt"
+    ]
+  },
+  "v0.33.0": {
+    "id": 303766308,
+    "tag_name": "v0.33.0",
+    "html_url": "https://github.com/docker/buildx/releases/tag/v0.33.0",
+    "assets": [
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.darwin-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.darwin-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.freebsd-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.freebsd-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.freebsd-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.freebsd-amd64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.freebsd-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.freebsd-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.freebsd-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.freebsd-arm64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-amd64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm-v6",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm-v6.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm-v7",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm-v7.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-ppc64le",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-ppc64le.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-riscv64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-riscv64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-s390x",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-s390x.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.netbsd-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.netbsd-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.netbsd-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.netbsd-amd64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.netbsd-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.netbsd-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.netbsd-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.netbsd-arm64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.openbsd-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.openbsd-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.openbsd-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.openbsd-amd64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.openbsd-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.openbsd-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.openbsd-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.openbsd-arm64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.windows-amd64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.windows-amd64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.windows-arm64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.windows-arm64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/checksums.txt"
+    ]
+  },
+  "edge": {
+    "id": 303766308,
+    "tag_name": "v0.33.0",
+    "html_url": "https://github.com/docker/buildx/releases/tag/v0.33.0",
+    "assets": [
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.darwin-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.darwin-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.freebsd-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.freebsd-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.freebsd-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.freebsd-amd64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.freebsd-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.freebsd-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.freebsd-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.freebsd-arm64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-amd64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm-v6",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm-v6.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm-v7",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm-v7.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-arm64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-ppc64le",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-ppc64le.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-riscv64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-riscv64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-s390x",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.linux-s390x.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.netbsd-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.netbsd-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.netbsd-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.netbsd-amd64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.netbsd-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.netbsd-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.netbsd-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.netbsd-arm64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.openbsd-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.openbsd-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.openbsd-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.openbsd-amd64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.openbsd-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.openbsd-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.openbsd-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.openbsd-arm64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.windows-amd64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.windows-amd64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.windows-arm64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/buildx-v0.33.0.windows-arm64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0/checksums.txt"
+    ]
+  },
+  "v0.33.0-rc1": {
+    "id": 301579825,
+    "tag_name": "v0.33.0-rc1",
+    "html_url": "https://github.com/docker/buildx/releases/tag/v0.33.0-rc1",
+    "assets": [
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.darwin-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.darwin-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.darwin-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.darwin-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.darwin-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.darwin-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.freebsd-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.freebsd-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.freebsd-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.freebsd-amd64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.freebsd-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.freebsd-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.freebsd-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.freebsd-arm64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.linux-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.linux-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.linux-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.linux-amd64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.linux-arm-v6",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.linux-arm-v6.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.linux-arm-v6.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.linux-arm-v6.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.linux-arm-v7",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.linux-arm-v7.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.linux-arm-v7.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.linux-arm-v7.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.linux-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.linux-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.linux-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.linux-arm64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.linux-ppc64le",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.linux-ppc64le.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.linux-ppc64le.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.linux-ppc64le.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.linux-riscv64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.linux-riscv64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.linux-riscv64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.linux-riscv64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.linux-s390x",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.linux-s390x.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.linux-s390x.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.linux-s390x.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.netbsd-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.netbsd-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.netbsd-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.netbsd-amd64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.netbsd-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.netbsd-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.netbsd-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.netbsd-arm64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.openbsd-amd64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.openbsd-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.openbsd-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.openbsd-amd64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.openbsd-arm64",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.openbsd-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.openbsd-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.openbsd-arm64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.windows-amd64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.windows-amd64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.windows-amd64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.windows-amd64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.windows-arm64.exe",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.windows-arm64.provenance.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.windows-arm64.sbom.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/buildx-v0.33.0-rc1.windows-arm64.sigstore.json",
+      "https://github.com/docker/buildx/releases/download/v0.33.0-rc1/checksums.txt"
    ]
  },
  "v0.32.1": {
@@ -221,80 +443,6 @@
      "https://github.com/docker/buildx/releases/download/v0.32.0/checksums.txt"
    ]
  },
-  "edge": {
-    "id": 293153745,
-    "tag_name": "v0.32.1",
-    "html_url": "https://github.com/docker/buildx/releases/tag/v0.32.1",
-    "assets": [
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.darwin-amd64",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.darwin-amd64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.darwin-amd64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.darwin-arm64",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.darwin-arm64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.darwin-arm64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.freebsd-amd64",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.freebsd-amd64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.freebsd-amd64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.freebsd-amd64.sigstore.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.freebsd-arm64",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.freebsd-arm64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.freebsd-arm64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.freebsd-arm64.sigstore.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-amd64",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-amd64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-amd64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-amd64.sigstore.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-arm-v6",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-arm-v6.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-arm-v6.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-arm-v6.sigstore.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-arm-v7",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-arm-v7.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-arm-v7.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-arm-v7.sigstore.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-arm64",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-arm64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-arm64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-arm64.sigstore.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-ppc64le",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-ppc64le.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-ppc64le.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-ppc64le.sigstore.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-riscv64",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-riscv64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-riscv64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-riscv64.sigstore.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-s390x",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-s390x.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-s390x.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.linux-s390x.sigstore.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.netbsd-amd64",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.netbsd-amd64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.netbsd-amd64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.netbsd-amd64.sigstore.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.netbsd-arm64",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.netbsd-arm64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.netbsd-arm64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.netbsd-arm64.sigstore.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.openbsd-amd64",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.openbsd-amd64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.openbsd-amd64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.openbsd-amd64.sigstore.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.openbsd-arm64",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.openbsd-arm64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.openbsd-arm64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.openbsd-arm64.sigstore.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.windows-amd64.exe",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.windows-amd64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.windows-amd64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.windows-amd64.sigstore.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.windows-arm64.exe",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.windows-arm64.provenance.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.windows-arm64.sbom.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/buildx-v0.32.1.windows-arm64.sigstore.json",
-      "https://github.com/docker/buildx/releases/download/v0.32.1/checksums.txt"
-    ]
-  },
  "v0.32.0-rc2": {
    "id": 291436359,
    "tag_name": "v0.32.0-rc2",
--- a/.github/cosign-releases.json
+++ b/.github/cosign-releases.json
@@ -1,92 +1,302 @@
 {
  "latest": {
-    "id": 288413621,
-    "tag_name": "v3.0.5",
-    "html_url": "https://github.com/sigstore/cosign/releases/tag/v3.0.5",
+    "id": 305842182,
+    "tag_name": "v3.0.6",
+    "html_url": "https://github.com/sigstore/cosign/releases/tag/v3.0.6",
    "assets": [
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.aarch64.rpm",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.aarch64.rpm.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.armv7hl.rpm",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.armv7hl.rpm.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.ppc64le.rpm",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.ppc64le.rpm.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.riscv64.rpm",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.riscv64.rpm.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.s390x.rpm",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.s390x.rpm.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.x86_64.rpm",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.x86_64.rpm.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-darwin-amd64",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-darwin-amd64-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-darwin-amd64.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-darwin-amd64_3.0.5_darwin_amd64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-darwin-arm64",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-darwin-arm64-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-darwin-arm64.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-darwin-arm64_3.0.5_darwin_arm64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-amd64",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-amd64-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-amd64.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-amd64_3.0.5_linux_amd64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-arm",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-arm-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-arm.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-arm64",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-arm64-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-arm64.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-arm64_3.0.5_linux_arm64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-arm_3.0.5_linux_arm.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-pivkey-pkcs11key-amd64",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-pivkey-pkcs11key-amd64-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-pivkey-pkcs11key-amd64.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-pivkey-pkcs11key-amd64_3.0.5_linux_amd64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-pivkey-pkcs11key-arm64",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-pivkey-pkcs11key-arm64-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-pivkey-pkcs11key-arm64.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-pivkey-pkcs11key-arm64_3.0.5_linux_arm64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-ppc64le",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-ppc64le-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-ppc64le.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-ppc64le_3.0.5_linux_ppc64le.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-riscv64",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-riscv64-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-riscv64.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-riscv64_3.0.5_linux_riscv64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-s390x",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-s390x-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-s390x.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-s390x_3.0.5_linux_s390x.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-windows-amd64.exe",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-windows-amd64.exe-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-windows-amd64.exe.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-windows-amd64.exe_3.0.5_windows_amd64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_aarch64.apk",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_aarch64.apk.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_amd64.deb",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_amd64.deb.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_arm64.deb",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_arm64.deb.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_armhf.deb",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_armhf.deb.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_armv7.apk",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_armv7.apk.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_ppc64el.deb",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_ppc64el.deb.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_ppc64le.apk",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_ppc64le.apk.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_riscv64.apk",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_riscv64.apk.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_riscv64.deb",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_riscv64.deb.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_s390x.apk",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_s390x.apk.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_s390x.deb",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_s390x.deb.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_x86_64.apk",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_x86_64.apk.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_checksums.txt",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_checksums.txt.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/release-cosign.pub"
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.aarch64.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.aarch64.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.armv7hl.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.armv7hl.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.ppc64le.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.ppc64le.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.riscv64.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.riscv64.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.s390x.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.s390x.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.x86_64.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.x86_64.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-darwin-amd64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-darwin-amd64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-darwin-amd64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-darwin-amd64_3.0.6_darwin_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-darwin-arm64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-darwin-arm64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-darwin-arm64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-darwin-arm64_3.0.6_darwin_arm64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-amd64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-amd64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-amd64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-amd64_3.0.6_linux_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-arm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-arm-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-arm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-arm64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-arm64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-arm64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-arm64_3.0.6_linux_arm64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-arm_3.0.6_linux_arm.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-pivkey-pkcs11key-amd64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-pivkey-pkcs11key-amd64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-pivkey-pkcs11key-amd64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-pivkey-pkcs11key-amd64_3.0.6_linux_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-pivkey-pkcs11key-arm64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-pivkey-pkcs11key-arm64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-pivkey-pkcs11key-arm64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-pivkey-pkcs11key-arm64_3.0.6_linux_arm64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-ppc64le",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-ppc64le-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-ppc64le.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-ppc64le_3.0.6_linux_ppc64le.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-riscv64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-riscv64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-riscv64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-riscv64_3.0.6_linux_riscv64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-s390x",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-s390x-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-s390x.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-s390x_3.0.6_linux_s390x.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-windows-amd64.exe",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-windows-amd64.exe-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-windows-amd64.exe.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-windows-amd64.exe_3.0.6_windows_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_aarch64.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_aarch64.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_amd64.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_amd64.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_arm64.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_arm64.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_armhf.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_armhf.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_armv7.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_armv7.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_ppc64el.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_ppc64el.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_ppc64le.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_ppc64le.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_riscv64.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_riscv64.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_riscv64.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_riscv64.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_s390x.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_s390x.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_s390x.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_s390x.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_x86_64.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_x86_64.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_checksums.txt",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_checksums.txt.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/release-cosign.pub"
+    ]
+  },
+  "v3.0.6": {
+    "id": 305842182,
+    "tag_name": "v3.0.6",
+    "html_url": "https://github.com/sigstore/cosign/releases/tag/v3.0.6",
+    "assets": [
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.aarch64.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.aarch64.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.armv7hl.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.armv7hl.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.ppc64le.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.ppc64le.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.riscv64.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.riscv64.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.s390x.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.s390x.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.x86_64.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.x86_64.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-darwin-amd64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-darwin-amd64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-darwin-amd64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-darwin-amd64_3.0.6_darwin_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-darwin-arm64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-darwin-arm64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-darwin-arm64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-darwin-arm64_3.0.6_darwin_arm64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-amd64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-amd64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-amd64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-amd64_3.0.6_linux_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-arm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-arm-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-arm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-arm64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-arm64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-arm64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-arm64_3.0.6_linux_arm64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-arm_3.0.6_linux_arm.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-pivkey-pkcs11key-amd64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-pivkey-pkcs11key-amd64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-pivkey-pkcs11key-amd64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-pivkey-pkcs11key-amd64_3.0.6_linux_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-pivkey-pkcs11key-arm64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-pivkey-pkcs11key-arm64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-pivkey-pkcs11key-arm64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-pivkey-pkcs11key-arm64_3.0.6_linux_arm64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-ppc64le",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-ppc64le-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-ppc64le.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-ppc64le_3.0.6_linux_ppc64le.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-riscv64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-riscv64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-riscv64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-riscv64_3.0.6_linux_riscv64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-s390x",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-s390x-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-s390x.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-s390x_3.0.6_linux_s390x.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-windows-amd64.exe",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-windows-amd64.exe-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-windows-amd64.exe.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-windows-amd64.exe_3.0.6_windows_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_aarch64.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_aarch64.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_amd64.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_amd64.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_arm64.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_arm64.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_armhf.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_armhf.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_armv7.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_armv7.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_ppc64el.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_ppc64el.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_ppc64le.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_ppc64le.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_riscv64.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_riscv64.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_riscv64.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_riscv64.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_s390x.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_s390x.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_s390x.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_s390x.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_x86_64.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_x86_64.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_checksums.txt",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_checksums.txt.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/release-cosign.pub"
+    ]
+  },
+  "v2.6.3": {
+    "id": 305838705,
+    "tag_name": "v2.6.3",
+    "html_url": "https://github.com/sigstore/cosign/releases/tag/v2.6.3",
+    "assets": [
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-2.6.3-1.aarch64.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-2.6.3-1.aarch64.rpm-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-2.6.3-1.aarch64.rpm-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-2.6.3-1.armv7hl.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-2.6.3-1.armv7hl.rpm-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-2.6.3-1.armv7hl.rpm-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-2.6.3-1.ppc64le.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-2.6.3-1.ppc64le.rpm-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-2.6.3-1.ppc64le.rpm-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-2.6.3-1.riscv64.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-2.6.3-1.riscv64.rpm-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-2.6.3-1.riscv64.rpm-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-2.6.3-1.s390x.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-2.6.3-1.s390x.rpm-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-2.6.3-1.s390x.rpm-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-2.6.3-1.x86_64.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-2.6.3-1.x86_64.rpm-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-2.6.3-1.x86_64.rpm-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-darwin-amd64",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-darwin-amd64-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-darwin-amd64-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-darwin-amd64.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-darwin-amd64_2.6.3_darwin_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-darwin-arm64",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-darwin-arm64-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-darwin-arm64-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-darwin-arm64.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-darwin-arm64_2.6.3_darwin_arm64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-amd64",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-amd64-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-amd64-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-amd64.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-amd64_2.6.3_linux_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-arm",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-arm-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-arm-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-arm.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-arm64",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-arm64-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-arm64-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-arm64.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-arm64_2.6.3_linux_arm64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-arm_2.6.3_linux_arm.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-pivkey-pkcs11key-amd64",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-pivkey-pkcs11key-amd64-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-pivkey-pkcs11key-amd64-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-pivkey-pkcs11key-amd64.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-pivkey-pkcs11key-amd64_2.6.3_linux_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-pivkey-pkcs11key-arm64",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-pivkey-pkcs11key-arm64-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-pivkey-pkcs11key-arm64-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-pivkey-pkcs11key-arm64.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-pivkey-pkcs11key-arm64_2.6.3_linux_arm64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-ppc64le",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-ppc64le-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-ppc64le-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-ppc64le.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-ppc64le_2.6.3_linux_ppc64le.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-riscv64",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-riscv64-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-riscv64-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-riscv64.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-riscv64_2.6.3_linux_riscv64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-s390x",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-s390x-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-s390x-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-s390x.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-linux-s390x_2.6.3_linux_s390x.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-windows-amd64.exe",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-windows-amd64.exe-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-windows-amd64.exe-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-windows-amd64.exe.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign-windows-amd64.exe_2.6.3_windows_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_aarch64.apk",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_aarch64.apk-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_aarch64.apk-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_amd64.deb",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_amd64.deb-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_amd64.deb-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_arm64.deb",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_arm64.deb-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_arm64.deb-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_armhf.deb",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_armhf.deb-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_armhf.deb-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_armv7.apk",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_armv7.apk-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_armv7.apk-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_ppc64el.deb",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_ppc64el.deb-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_ppc64el.deb-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_ppc64le.apk",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_ppc64le.apk-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_ppc64le.apk-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_riscv64.apk",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_riscv64.apk-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_riscv64.apk-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_riscv64.deb",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_riscv64.deb-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_riscv64.deb-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_s390x.apk",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_s390x.apk-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_s390x.apk-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_s390x.deb",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_s390x.deb-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_s390x.deb-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_x86_64.apk",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_x86_64.apk-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_2.6.3_x86_64.apk-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_checksums.txt",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_checksums.txt-keyless.pem",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/cosign_checksums.txt-keyless.sig",
+      "https://github.com/sigstore/cosign/releases/download/v2.6.3/release-cosign.pub"
    ]
  },
  "v3.0.5": {
@@ -3496,93 +3706,93 @@
    ]
  },
  "edge": {
-    "id": 288413621,
-    "tag_name": "v3.0.5",
-    "html_url": "https://github.com/sigstore/cosign/releases/tag/v3.0.5",
+    "id": 305842182,
+    "tag_name": "v3.0.6",
+    "html_url": "https://github.com/sigstore/cosign/releases/tag/v3.0.6",
    "assets": [
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.aarch64.rpm",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.aarch64.rpm.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.armv7hl.rpm",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.armv7hl.rpm.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.ppc64le.rpm",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.ppc64le.rpm.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.riscv64.rpm",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.riscv64.rpm.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.s390x.rpm",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.s390x.rpm.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.x86_64.rpm",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-3.0.5-1.x86_64.rpm.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-darwin-amd64",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-darwin-amd64-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-darwin-amd64.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-darwin-amd64_3.0.5_darwin_amd64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-darwin-arm64",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-darwin-arm64-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-darwin-arm64.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-darwin-arm64_3.0.5_darwin_arm64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-amd64",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-amd64-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-amd64.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-amd64_3.0.5_linux_amd64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-arm",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-arm-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-arm.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-arm64",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-arm64-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-arm64.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-arm64_3.0.5_linux_arm64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-arm_3.0.5_linux_arm.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-pivkey-pkcs11key-amd64",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-pivkey-pkcs11key-amd64-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-pivkey-pkcs11key-amd64.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-pivkey-pkcs11key-amd64_3.0.5_linux_amd64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-pivkey-pkcs11key-arm64",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-pivkey-pkcs11key-arm64-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-pivkey-pkcs11key-arm64.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-pivkey-pkcs11key-arm64_3.0.5_linux_arm64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-ppc64le",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-ppc64le-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-ppc64le.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-ppc64le_3.0.5_linux_ppc64le.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-riscv64",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-riscv64-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-riscv64.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-riscv64_3.0.5_linux_riscv64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-s390x",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-s390x-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-s390x.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-linux-s390x_3.0.5_linux_s390x.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-windows-amd64.exe",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-windows-amd64.exe-kms.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-windows-amd64.exe.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign-windows-amd64.exe_3.0.5_windows_amd64.sbom.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_aarch64.apk",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_aarch64.apk.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_amd64.deb",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_amd64.deb.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_arm64.deb",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_arm64.deb.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_armhf.deb",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_armhf.deb.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_armv7.apk",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_armv7.apk.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_ppc64el.deb",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_ppc64el.deb.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_ppc64le.apk",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_ppc64le.apk.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_riscv64.apk",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_riscv64.apk.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_riscv64.deb",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_riscv64.deb.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_s390x.apk",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_s390x.apk.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_s390x.deb",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_s390x.deb.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_x86_64.apk",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_3.0.5_x86_64.apk.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_checksums.txt",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/cosign_checksums.txt.sigstore.json",
-      "https://github.com/sigstore/cosign/releases/download/v3.0.5/release-cosign.pub"
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.aarch64.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.aarch64.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.armv7hl.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.armv7hl.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.ppc64le.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.ppc64le.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.riscv64.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.riscv64.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.s390x.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.s390x.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.x86_64.rpm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-3.0.6-1.x86_64.rpm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-darwin-amd64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-darwin-amd64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-darwin-amd64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-darwin-amd64_3.0.6_darwin_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-darwin-arm64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-darwin-arm64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-darwin-arm64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-darwin-arm64_3.0.6_darwin_arm64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-amd64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-amd64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-amd64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-amd64_3.0.6_linux_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-arm",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-arm-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-arm.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-arm64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-arm64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-arm64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-arm64_3.0.6_linux_arm64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-arm_3.0.6_linux_arm.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-pivkey-pkcs11key-amd64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-pivkey-pkcs11key-amd64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-pivkey-pkcs11key-amd64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-pivkey-pkcs11key-amd64_3.0.6_linux_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-pivkey-pkcs11key-arm64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-pivkey-pkcs11key-arm64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-pivkey-pkcs11key-arm64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-pivkey-pkcs11key-arm64_3.0.6_linux_arm64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-ppc64le",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-ppc64le-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-ppc64le.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-ppc64le_3.0.6_linux_ppc64le.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-riscv64",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-riscv64-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-riscv64.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-riscv64_3.0.6_linux_riscv64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-s390x",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-s390x-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-s390x.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-s390x_3.0.6_linux_s390x.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-windows-amd64.exe",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-windows-amd64.exe-kms.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-windows-amd64.exe.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-windows-amd64.exe_3.0.6_windows_amd64.sbom.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_aarch64.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_aarch64.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_amd64.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_amd64.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_arm64.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_arm64.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_armhf.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_armhf.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_armv7.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_armv7.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_ppc64el.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_ppc64el.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_ppc64le.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_ppc64le.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_riscv64.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_riscv64.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_riscv64.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_riscv64.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_s390x.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_s390x.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_s390x.deb",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_s390x.deb.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_x86_64.apk",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_3.0.6_x86_64.apk.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_checksums.txt",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign_checksums.txt.sigstore.json",
+      "https://github.com/sigstore/cosign/releases/download/v3.0.6/release-cosign.pub"
    ]
  },
  "v2.0.0-rc.3": {
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -5,6 +5,12 @@ updates:
    directory: "/"
    schedule:
      interval: "daily"
+    groups:
+      crazy-max-dot-github:
+        patterns:
+          - "crazy-max/.github/*"
+    cooldown:
+      default-days: 2
    labels:
      - "dependencies"
      - "bot"
@@ -13,6 +19,8 @@ updates:
    directory: "/"
    schedule:
      interval: "daily"
+    cooldown:
+      default-days: 2
    versioning-strategy: "increase"
    allow:
      - dependency-type: "production"
--- a/.github/docker-releases.json
+++ b/.github/docker-releases.json
@@ -1,17 +1,35 @@
 {
  "latest": {
-    "id": 293527283,
-    "tag_name": "docker-v29.3.0",
-    "html_url": "https://github.com/moby/moby/releases/tag/docker-v29.3.0",
+    "id": 305984249,
+    "tag_name": "docker-v29.4.0",
+    "html_url": "https://github.com/moby/moby/releases/tag/docker-v29.4.0",
    "assets": []
  },
-  "v29.3.0": {
-    "id": 293527283,
-    "tag_name": "docker-v29.3.0",
-    "html_url": "https://github.com/moby/moby/releases/tag/docker-v29.3.0",
+  "v29.4.0": {
+    "id": 305984249,
+    "tag_name": "docker-v29.4.0",
+    "html_url": "https://github.com/moby/moby/releases/tag/docker-v29.4.0",
    "assets": []
  },
  "edge": {
+    "id": 305984249,
+    "tag_name": "docker-v29.4.0",
+    "html_url": "https://github.com/moby/moby/releases/tag/docker-v29.4.0",
+    "assets": []
+  },
+  "v29.4.0-rc.1": {
+    "id": 305082087,
+    "tag_name": "docker-v29.4.0-rc.1",
+    "html_url": "https://github.com/moby/moby/releases/tag/docker-v29.4.0-rc.1",
+    "assets": []
+  },
+  "v29.3.1": {
+    "id": 301291796,
+    "tag_name": "docker-v29.3.1",
+    "html_url": "https://github.com/moby/moby/releases/tag/docker-v29.3.1",
+    "assets": []
+  },
+  "v29.3.0": {
    "id": 293527283,
    "tag_name": "docker-v29.3.0",
    "html_url": "https://github.com/moby/moby/releases/tag/docker-v29.3.0",
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -4,6 +4,9 @@ concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

+permissions:
+  contents: read
+
 on:
  push:
    branches:
@@ -24,7 +27,7 @@ jobs:
    steps:
      -
        name: Build
-        uses: docker/bake-action@v7
+        uses: docker/bake-action@82490499d2e5613fcead7e128237ef0b0ea210f7 # v7.0.0
        with:
          targets: build
        env:
--- a/.github/workflows/buildx-lab-releases-json.yml
+++ b/.github/workflows/buildx-lab-releases-json.yml
@@ -4,6 +4,9 @@ concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

+permissions:
+  contents: read
+
 on:
  workflow_dispatch:
  schedule:
@@ -17,25 +20,27 @@ on:

 jobs:
  generate:
-    uses: crazy-max/.github/.github/workflows/releases-json.yml@2842b806167c9dbacf5f972e0fcf47204a99d987
+    uses: crazy-max/.github/.github/workflows/releases-json.yml@bb328ea508cd6a89d0865555ddbeb148e5724aed # v1.3.0
    with:
      repository: docker/buildx-desktop
      artifact_name: buildx-lab-releases-json
      filename: buildx-lab-releases.json
-    secrets: inherit

  open-pr:
    runs-on: ubuntu-24.04
    if: github.event_name != 'pull_request'
+    permissions:
+      contents: write
+      pull-requests: write
    needs:
      - generate
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      -
        name: Download
-        uses: actions/download-artifact@v8
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
        with:
          name: buildx-lab-releases-json
          path: .github
--- a/.github/workflows/buildx-releases-json.yml
+++ b/.github/workflows/buildx-releases-json.yml
@@ -4,6 +4,9 @@ concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

+permissions:
+  contents: read
+
 on:
  workflow_dispatch:
  schedule:
@@ -17,25 +20,27 @@ on:

 jobs:
  generate:
-    uses: crazy-max/.github/.github/workflows/releases-json.yml@2842b806167c9dbacf5f972e0fcf47204a99d987
+    uses: crazy-max/.github/.github/workflows/releases-json.yml@bb328ea508cd6a89d0865555ddbeb148e5724aed # v1.3.0
    with:
      repository: docker/buildx
      artifact_name: buildx-releases-json
      filename: buildx-releases.json
-    secrets: inherit

  open-pr:
    runs-on: ubuntu-24.04
    if: github.event_name != 'pull_request'
+    permissions:
+      contents: write
+      pull-requests: write
    needs:
      - generate
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      -
        name: Download
-        uses: actions/download-artifact@v8
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
        with:
          name: buildx-releases-json
          path: .github
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -7,9 +7,7 @@ on:
  pull_request:

 permissions:
-  actions: read
  contents: read
-  security-events: write

 env:
  NODE_VERSION: "24"
@@ -17,10 +15,13 @@ env:
 jobs:
  analyze:
    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      security-events: write
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      -
        name: Enable corepack
        run: |
@@ -28,19 +29,19 @@ jobs:
          yarn --version
      -
        name: Set up Node
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
        with:
          node-version: ${{ env.NODE_VERSION }}
      -
        name: Initialize CodeQL
-        uses: github/codeql-action/init@v4
+        uses: github/codeql-action/init@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
        with:
          languages: javascript-typescript
      -
        name: Autobuild
-        uses: github/codeql-action/autobuild@v4
+        uses: github/codeql-action/autobuild@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
      -
        name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v4
+        uses: github/codeql-action/analyze@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
        with:
          category: "/language:javascript-typescript"
--- a/.github/workflows/compose-lab-releases-json.yml
+++ b/.github/workflows/compose-lab-releases-json.yml
@@ -4,6 +4,9 @@ concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

+permissions:
+  contents: read
+
 on:
  workflow_dispatch:
  schedule:
@@ -17,25 +20,27 @@ on:

 jobs:
  generate:
-    uses: crazy-max/.github/.github/workflows/releases-json.yml@2842b806167c9dbacf5f972e0fcf47204a99d987
+    uses: crazy-max/.github/.github/workflows/releases-json.yml@bb328ea508cd6a89d0865555ddbeb148e5724aed # v1.3.0
    with:
      repository: docker/compose-desktop
      artifact_name: compose-lab-releases-json
      filename: compose-lab-releases.json
-    secrets: inherit

  open-pr:
    runs-on: ubuntu-24.04
    if: github.event_name != 'pull_request'
+    permissions:
+      contents: write
+      pull-requests: write
    needs:
      - generate
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      -
        name: Download
-        uses: actions/download-artifact@v8
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
        with:
          name: compose-lab-releases-json
          path: .github
--- a/.github/workflows/compose-releases-json.yml
+++ b/.github/workflows/compose-releases-json.yml
@@ -4,6 +4,9 @@ concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

+permissions:
+  contents: read
+
 on:
  workflow_dispatch:
  schedule:
@@ -17,25 +20,27 @@ on:

 jobs:
  generate:
-    uses: crazy-max/.github/.github/workflows/releases-json.yml@2842b806167c9dbacf5f972e0fcf47204a99d987
+    uses: crazy-max/.github/.github/workflows/releases-json.yml@bb328ea508cd6a89d0865555ddbeb148e5724aed # v1.3.0
    with:
      repository: docker/compose
      artifact_name: compose-releases-json
      filename: compose-releases.json
-    secrets: inherit

  open-pr:
    runs-on: ubuntu-24.04
    if: github.event_name != 'pull_request'
+    permissions:
+      contents: write
+      pull-requests: write
    needs:
      - generate
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      -
        name: Download
-        uses: actions/download-artifact@v8
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
        with:
          name: compose-releases-json
          path: .github
--- a/.github/workflows/cosign-releases-json.yml
+++ b/.github/workflows/cosign-releases-json.yml
@@ -4,6 +4,9 @@ concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

+permissions:
+  contents: read
+
 on:
  workflow_dispatch:
  schedule:
@@ -17,25 +20,27 @@ on:

 jobs:
  generate:
-    uses: crazy-max/.github/.github/workflows/releases-json.yml@2842b806167c9dbacf5f972e0fcf47204a99d987
+    uses: crazy-max/.github/.github/workflows/releases-json.yml@bb328ea508cd6a89d0865555ddbeb148e5724aed # v1.3.0
    with:
      repository: sigstore/cosign
      artifact_name: cosign-releases-json
      filename: cosign-releases.json
-    secrets: inherit

  open-pr:
    runs-on: ubuntu-24.04
    if: github.event_name != 'pull_request'
+    permissions:
+      contents: write
+      pull-requests: write
    needs:
      - generate
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      -
        name: Download
-        uses: actions/download-artifact@v8
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
        with:
          name: cosign-releases-json
          path: .github
--- a/.github/workflows/docker-releases-json.yml
+++ b/.github/workflows/docker-releases-json.yml
@@ -4,6 +4,9 @@ concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

+permissions:
+  contents: read
+
 on:
  workflow_dispatch:
  schedule:
@@ -17,7 +20,7 @@ on:

 jobs:
  generate:
-    uses: crazy-max/.github/.github/workflows/releases-json.yml@2842b806167c9dbacf5f972e0fcf47204a99d987
+    uses: crazy-max/.github/.github/workflows/releases-json.yml@bb328ea508cd6a89d0865555ddbeb148e5724aed # v1.3.0
    with:
      repository: moby/moby
      artifact_name: docker-releases-json
@@ -25,20 +28,22 @@ jobs:
      tag_patterns: |
        ^docker-(.*)$
        ^(v.*)$
-    secrets: inherit

  open-pr:
    runs-on: ubuntu-24.04
    if: github.event_name != 'pull_request'
+    permissions:
+      contents: write
+      pull-requests: write
    needs:
      - generate
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      -
        name: Download
-        uses: actions/download-artifact@v8
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
        with:
          name: docker-releases-json
          path: .github
--- a/.github/workflows/pr-assign-author.yml
+++ b/.github/workflows/pr-assign-author.yml
@@ -4,14 +4,14 @@ permissions:
  contents: read

 on:
-  pull_request_target:
+  pull_request_target: # zizmor: ignore[dangerous-triggers] does not checkout, safe to use pull_request_target
    types:
      - opened
      - reopened

 jobs:
  run:
-    uses: crazy-max/.github/.github/workflows/pr-assign-author.yml@1b673f36fad86812f538c1df9794904038a23cbf
+    uses: crazy-max/.github/.github/workflows/pr-assign-author.yml@bb328ea508cd6a89d0865555ddbeb148e5724aed # v1.3.0
    permissions:
      contents: read
      pull-requests: write
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -1,13 +1,12 @@
 name: publish

-permissions:
-  id-token: write # required for OIDC
-  contents: write # required to create GitHub Release
-
 concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

+permissions:
+  contents: read
+
 on:
  push:
    tags:
@@ -19,10 +18,13 @@ env:
 jobs:
  publish:
    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write # required for OIDC
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      -
        name: Enable corepack
        run: |
@@ -30,7 +32,7 @@ jobs:
          yarn --version
      -
        name: Setup Node
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
        with:
          node-version: ${{ env.NODE_VERSION }}
          cache: 'yarn'
@@ -51,11 +53,3 @@ jobs:
        run: |
          npm version --no-git-tag-version ${GITHUB_REF#refs/tags/v}
          npm publish --provenance --access public
-      -
-        name: Create Release
-        uses: softprops/action-gh-release@153bb8e04406b158c6c84fc1615b65b24149a1fe  # v2.6.1
-        with:
-          draft: true
-          generate_release_notes: true
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
--- a/.github/workflows/regclient-releases-json.yml
+++ b/.github/workflows/regclient-releases-json.yml
@@ -4,6 +4,9 @@ concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

+permissions:
+  contents: read
+
 on:
  workflow_dispatch:
  schedule:
@@ -17,25 +20,27 @@ on:

 jobs:
  generate:
-    uses: crazy-max/.github/.github/workflows/releases-json.yml@2842b806167c9dbacf5f972e0fcf47204a99d987
+    uses: crazy-max/.github/.github/workflows/releases-json.yml@bb328ea508cd6a89d0865555ddbeb148e5724aed # v1.3.0
    with:
      repository: regclient/regclient
      artifact_name: regclient-releases-json
      filename: regclient-releases.json
-    secrets: inherit

  open-pr:
    runs-on: ubuntu-latest
    if: github.event_name != 'pull_request'
+    permissions:
+      contents: write
+      pull-requests: write
    needs:
      - generate
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      -
        name: Download
-        uses: actions/download-artifact@v8
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
        with:
          name: regclient-releases-json
          path: .github
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -4,6 +4,9 @@ concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

+permissions:
+  contents: read
+
 on:
  workflow_dispatch:
  push:
@@ -15,8 +18,8 @@ on:

 env:
  NODE_VERSION: "24"
-  BUILDX_VERSION: "v0.32.1"
-  BUILDKIT_IMAGE: "moby/buildkit:v0.28.0"
+  BUILDX_VERSION: "v0.33.0"
+  BUILDKIT_IMAGE: "moby/buildkit:v0.29.0"

 jobs:
  test:
@@ -33,10 +36,10 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      -
        name: Test
-        uses: docker/bake-action@v7
+        uses: docker/bake-action@82490499d2e5613fcead7e128237ef0b0ea210f7 # v7.0.0
        with:
          source: .
          targets: test-coverage
@@ -55,7 +58,7 @@ jobs:
        shell: bash
      -
        name: Upload coverage
-        uses: codecov/codecov-action@v5
+        uses: codecov/codecov-action@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2 # v6.0.0
        if: env.RUN_CODECOV == 'true' && matrix.node_version == env.NODE_VERSION
        with:
          files: ./coverage/clover.xml
@@ -69,7 +72,7 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      -
        name: Enable corepack
        run: |
@@ -77,7 +80,7 @@ jobs:
          yarn --version
      -
        name: Setup Node
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
        with:
          node-version: ${{ env.NODE_VERSION }}
          cache: 'yarn'
@@ -87,7 +90,7 @@ jobs:
      -
        name: Create includes
        id: set
-        uses: actions/github-script@v8
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
        with:
          script: |
            let tests = [];
@@ -153,15 +156,15 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      -
        name: Expose GitHub Runtime
-        uses: crazy-max/ghaction-github-runtime@v4
+        uses: crazy-max/ghaction-github-runtime@04d248b84655b509d8c44dc1d6f990c879747487 # v4.0.0
      -
        # FIXME: Needs to setup node twice on Windows: https://github.com/actions/setup-node/issues/1357#issuecomment-3254613964
        name: Setup Node
        if: startsWith(matrix.os, 'windows')
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
        with:
          node-version: ${{ env.NODE_VERSION }}
          package-manager-cache: false
@@ -172,14 +175,14 @@ jobs:
          yarn --version
      -
        name: Setup Node
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
        with:
          node-version: ${{ env.NODE_VERSION }}
          cache: 'yarn'
      -
        name: Set up Docker Buildx
        if: startsWith(matrix.os, 'ubuntu')
-        uses: docker/setup-buildx-action@v4
+        uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
        with:
          version: ${{ env.BUILDX_VERSION }}
          driver: docker
@@ -187,7 +190,7 @@ jobs:
        name: Set up container builder
        if: startsWith(matrix.os, 'ubuntu')
        id: builder
-        uses: docker/setup-buildx-action@v4
+        uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
        with:
          version: ${{ env.BUILDX_VERSION }}
          driver-opts: image=${{ env.BUILDKIT_IMAGE }}
@@ -197,7 +200,7 @@ jobs:
        run: yarn install
      -
        name: Test
-        uses: actions/github-script@v8
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
        with:
          script: |
            const testName = `${{ matrix.test_name }}`;
@@ -225,7 +228,7 @@ jobs:
        shell: bash
      -
        name: Upload coverage
-        uses: codecov/codecov-action@v5
+        uses: codecov/codecov-action@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2 # v6.0.0
        if: env.RUN_CODECOV == 'true'
        with:
          files: ./coverage/clover.xml
--- a/.github/workflows/undock-releases-json.yml
+++ b/.github/workflows/undock-releases-json.yml
@@ -4,6 +4,9 @@ concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

+permissions:
+  contents: read
+
 on:
  workflow_dispatch:
  schedule:
@@ -17,25 +20,27 @@ on:

 jobs:
  generate:
-    uses: crazy-max/.github/.github/workflows/releases-json.yml@2842b806167c9dbacf5f972e0fcf47204a99d987
+    uses: crazy-max/.github/.github/workflows/releases-json.yml@bb328ea508cd6a89d0865555ddbeb148e5724aed # v1.3.0
    with:
      repository: crazy-max/undock
      artifact_name: undock-releases-json
      filename: undock-releases.json
-    secrets: inherit

  open-pr:
    runs-on: ubuntu-24.04
    if: github.event_name != 'pull_request'
+    permissions:
+      contents: write
+      pull-requests: write
    needs:
      - generate
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      -
        name: Download
-        uses: actions/download-artifact@v8
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
        with:
          name: undock-releases-json
          path: .github
--- a/.github/workflows/validate.yml
+++ b/.github/workflows/validate.yml
@@ -4,6 +4,9 @@ concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

+permissions:
+  contents: read
+
 on:
  workflow_dispatch:
  push:
@@ -21,11 +24,11 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      -
        name: Generate matrix
        id: generate
-        uses: docker/bake-action/subaction/matrix@v7
+        uses: docker/bake-action/subaction/matrix@82490499d2e5613fcead7e128237ef0b0ea210f7 # v7.0.0
        with:
          target: validate

@@ -40,6 +43,6 @@ jobs:
    steps:
      -
        name: Validate
-        uses: docker/bake-action@v7
+        uses: docker/bake-action@82490499d2e5613fcead7e128237ef0b0ea210f7 # v7.0.0
        with:
          targets: ${{ matrix.target }}
--- a/.github/workflows/virtual-env.yml
+++ b/.github/workflows/virtual-env.yml
@@ -1,5 +1,12 @@
 name: virtual-env

+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
 on:
  workflow_dispatch:
  schedule:
@@ -68,4 +75,4 @@ jobs:
      -
        name: Dump context
        if: always()
-        uses: crazy-max/ghaction-dump-context@v2
+        uses: crazy-max/ghaction-dump-context@5d2753e7076f4568c7729971e25231f32147e2d8 # v3.0.0
--- a/.github/workflows/zizmor.yml
+++ b/.github/workflows/zizmor.yml
@@ -0,0 +1,26 @@
+name: zizmor
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
+on:
+  workflow_dispatch:
+  push:
+    branches:
+      - 'main'
+  pull_request:
+
+jobs:
+  run:
+    uses: crazy-max/.github/.github/workflows/zizmor.yml@bb328ea508cd6a89d0865555ddbeb148e5724aed # v1.3.0
+    permissions:
+      contents: read
+      security-events: write
+    with:
+      min-severity: medium
+      min-confidence: medium
+      persona: pedantic
--- a/.github/zizmor.yml
+++ b/.github/zizmor.yml
@@ -0,0 +1,4 @@
+# https://docs.zizmor.sh/configuration/
+rules:
+  secrets-outside-env: # FIXME: remove this rule when zizmor 1.24.0 is released, fixing the right persona attached to this rule: https://github.com/zizmorcore/zizmor/pull/1783
+    disable: true
--- a/tests/sigstore/sigstore-cosign-old.test.itg.ts
+++ b/tests/sigstore/sigstore-cosign-old.test.itg.ts
@@ -1,90 +0,0 @@
-/**
- * Copyright 2026 actions-toolkit authors
- *
- * Licensed under the Apache License, Version 2.0 (the "License");
- * you may not use this file except in compliance with the License.
- * You may obtain a copy of the License at
- *
- *      http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing, software
- * distributed under the License is distributed on an "AS IS" BASIS,
- * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- * See the License for the specific language governing permissions and
- * limitations under the License.
- */
-
-import {beforeAll, describe, expect, it} from 'vitest';
-import * as path from 'path';
-
-import {Buildx} from '../../src/buildx/buildx.js';
-import {Build} from '../../src/buildx/build.js';
-import {Install as CosignInstall} from '../../src/cosign/install.js';
-import {Docker} from '../../src/docker/docker.js';
-import {Exec} from '../../src/exec.js';
-import {Sigstore} from '../../src/sigstore/sigstore.js';
-
-const fixturesDir = path.join(__dirname, '..', '.fixtures');
-
-const runTest = process.env.GITHUB_ACTIONS && process.env.GITHUB_ACTIONS === 'true' && process.env.ImageOS && process.env.ImageOS.startsWith('ubuntu');
-
-const maybeIdToken = runTest && process.env.ACTIONS_ID_TOKEN_REQUEST_URL ? describe : describe.skip;
-
-beforeAll(async () => {
-  const cosignInstall = new CosignInstall();
-  const cosignBinPath = await cosignInstall.download({
-    version: 'v3.0.2'
-  });
-  await cosignInstall.install(cosignBinPath);
-}, 100000);
-
-maybeIdToken('signAttestationManifests', () => {
-  it('build, sign and verify', async () => {
-    const buildx = new Buildx();
-    const build = new Build({buildx: buildx});
-    const imageName = 'ghcr.io/docker/actions-toolkit/test';
-
-    await expect(
-      (async () => {
-        await Docker.getExecOutput(['login', '--password-stdin', '--username', process.env.GITHUB_REPOSITORY_OWNER || 'docker', 'ghcr.io'], {
-          input: Buffer.from(process.env.GITHUB_TOKEN || '')
-        });
-      })()
-    ).resolves.not.toThrow();
-
-    await expect(
-      (async () => {
-        // prettier-ignore
-        const buildCmd = await buildx.getCommand([
-          '--builder', process.env.CTN_BUILDER_NAME ?? 'default',
-          'build',
-          '-f', path.join(fixturesDir, 'hello.Dockerfile'),
-          '--provenance=mode=max',
-          '--tag', `${imageName}:sigstore-itg`,
-          '--platform', 'linux/amd64,linux/arm64',
-          '--push',
-          '--metadata-file', build.getMetadataFilePath(),
-          fixturesDir
-        ]);
-        await Exec.exec(buildCmd.command, buildCmd.args);
-      })()
-    ).resolves.not.toThrow();
-
-    const metadata = build.resolveMetadata();
-    expect(metadata).toBeDefined();
-    const buildDigest = build.resolveDigest(metadata);
-    expect(buildDigest).toBeDefined();
-
-    const sigstore = new Sigstore();
-    const signResults = await sigstore.signAttestationManifests({
-      imageNames: [imageName],
-      imageDigest: buildDigest!
-    });
-    expect(Object.keys(signResults).length).toEqual(2);
-
-    const verifyResults = await sigstore.verifySignedManifests(signResults, {
-      certificateIdentityRegexp: `^https://github.com/docker/actions-toolkit/.github/workflows/test.yml.*$`
-    });
-    expect(Object.keys(verifyResults).length).toEqual(2);
-  }, 100000);
-});
--- a/tests/sigstore/sigstore.test.itg.ts
+++ b/tests/sigstore/sigstore.test.itg.ts
@@ -16,10 +16,12 @@

 import {beforeAll, describe, expect, it, test} from 'vitest';
 import fs from 'fs';
+import os from 'os';
 import * as path from 'path';

 import {Buildx} from '../../src/buildx/buildx.js';
 import {Build} from '../../src/buildx/build.js';
+import {Cosign} from '../../src/cosign/cosign.js';
 import {Install as CosignInstall} from '../../src/cosign/install.js';
 import {Docker} from '../../src/docker/docker.js';
 import {Exec} from '../../src/exec.js';
@@ -33,73 +35,106 @@ const runTest = process.env.GITHUB_ACTIONS && process.env.GITHUB_ACTIONS === 'tr
 const maybe = runTest ? describe : describe.skip;
 const maybeIdToken = runTest && process.env.ACTIONS_ID_TOKEN_REQUEST_URL ? describe : describe.skip;

-beforeAll(async () => {
-  const cosignInstall = new CosignInstall();
-  const cosignBinPath = await cosignInstall.download({
-    version: 'v3.0.4'
+const imageName = 'ghcr.io/docker/actions-toolkit/test';
+const currentCosignVersion = 'v3.0.6';
+const signAttestationCosignVersions = ['v3.0.2', currentCosignVersion] as const;
+const installedCosign = new Map<string, Promise<string>>();
+
+async function installCosign(version: string): Promise<string> {
+  let installedPath = installedCosign.get(version);
+  if (!installedPath) {
+    installedPath = (async () => {
+      const cosignInstall = new CosignInstall();
+      const cosignBinPath = await cosignInstall.download({
+        version
+      });
+      const installDir = fs.mkdtempSync(path.join(process.env.RUNNER_TEMP || os.tmpdir(), `sigstore-cosign-${version.replace(/[^a-zA-Z0-9]+/g, '-')}-`));
+      return await cosignInstall.install(cosignBinPath, installDir);
+    })();
+    installedCosign.set(version, installedPath);
+  }
+  return await installedPath;
+}
+
+for (const cosignVersion of signAttestationCosignVersions) {
+  maybeIdToken(`signAttestationManifests with cosign ${cosignVersion}`, () => {
+    let sigstore: Sigstore;
+
+    beforeAll(async () => {
+      sigstore = new Sigstore({
+        cosign: new Cosign({
+          binPath: await installCosign(cosignVersion)
+        })
+      });
+    }, 100000);
+
+    it('build, sign and verify', async () => {
+      const buildx = new Buildx();
+      const build = new Build({buildx: buildx});
+      const versionTag = cosignVersion.replace(/^v/, '').replace(/\./g, '-');
+
+      await expect(
+        (async () => {
+          await Docker.getExecOutput(['login', '--password-stdin', '--username', process.env.GITHUB_REPOSITORY_OWNER || 'docker', 'ghcr.io'], {
+            input: Buffer.from(process.env.GITHUB_TOKEN || '')
+          });
+        })()
+      ).resolves.not.toThrow();
+
+      await expect(
+        (async () => {
+          // prettier-ignore
+          const buildCmd = await buildx.getCommand([
+            '--builder', process.env.CTN_BUILDER_NAME ?? 'default',
+            'build',
+            '-f', path.join(fixturesDir, 'hello.Dockerfile'),
+            '--provenance=mode=max',
+            '--tag', `${imageName}:sigstore-itg-cosign-${versionTag}`,
+            '--platform', 'linux/amd64,linux/arm64',
+            '--push',
+            '--metadata-file', build.getMetadataFilePath(),
+            fixturesDir
+          ]);
+          await Exec.exec(buildCmd.command, buildCmd.args);
+        })()
+      ).resolves.not.toThrow();
+
+      const metadata = build.resolveMetadata();
+      expect(metadata).toBeDefined();
+      const buildDigest = build.resolveDigest(metadata);
+      expect(buildDigest).toBeDefined();
+
+      const signResults = await sigstore.signAttestationManifests({
+        imageNames: [imageName],
+        imageDigest: buildDigest!
+      });
+      expect(Object.keys(signResults).length).toEqual(2);
+
+      const verifyResults = await sigstore.verifySignedManifests(signResults, {
+        certificateIdentityRegexp: `^https://github.com/docker/actions-toolkit/.github/workflows/test.yml.*$`
+      });
+      expect(Object.keys(verifyResults).length).toEqual(2);
+    }, 200000);
  });
-  await cosignInstall.install(cosignBinPath);
-}, 100000);
-
-maybeIdToken('signAttestationManifests', () => {
-  it('build, sign and verify', async () => {
-    const buildx = new Buildx();
-    const build = new Build({buildx: buildx});
-    const imageName = 'ghcr.io/docker/actions-toolkit/test';
-
-    await expect(
-      (async () => {
-        await Docker.getExecOutput(['login', '--password-stdin', '--username', process.env.GITHUB_REPOSITORY_OWNER || 'docker', 'ghcr.io'], {
-          input: Buffer.from(process.env.GITHUB_TOKEN || '')
-        });
-      })()
-    ).resolves.not.toThrow();
-
-    await expect(
-      (async () => {
-        // prettier-ignore
-        const buildCmd = await buildx.getCommand([
-          '--builder', process.env.CTN_BUILDER_NAME ?? 'default',
-          'build',
-          '-f', path.join(fixturesDir, 'hello.Dockerfile'),
-          '--provenance=mode=max',
-          '--tag', `${imageName}:sigstore-itg`,
-          '--platform', 'linux/amd64,linux/arm64',
-          '--push',
-          '--metadata-file', build.getMetadataFilePath(),
-          fixturesDir
-        ]);
-        await Exec.exec(buildCmd.command, buildCmd.args);
-      })()
-    ).resolves.not.toThrow();
-
-    const metadata = build.resolveMetadata();
-    expect(metadata).toBeDefined();
-    const buildDigest = build.resolveDigest(metadata);
-    expect(buildDigest).toBeDefined();
-
-    const sigstore = new Sigstore();
-    const signResults = await sigstore.signAttestationManifests({
-      imageNames: [imageName],
-      imageDigest: buildDigest!
-    });
-    expect(Object.keys(signResults).length).toEqual(2);
-
-    const verifyResults = await sigstore.verifySignedManifests(signResults, {
-      certificateIdentityRegexp: `^https://github.com/docker/actions-toolkit/.github/workflows/test.yml.*$`
-    });
-    expect(Object.keys(verifyResults).length).toEqual(2);
-  }, 100000);
-});
+}

 maybe('verifyImageAttestations', () => {
+  let sigstore: Sigstore;
+
+  beforeAll(async () => {
+    sigstore = new Sigstore({
+      cosign: new Cosign({
+        binPath: await installCosign(currentCosignVersion)
+      })
+    });
+  }, 100000);
+
  test.each([
    ['moby/buildkit:master@sha256:84014da3581b2ff2c14cb4f60029cf9caa272b79e58f2e89c651ea6966d7a505', `^https://github.com/docker/github-builder-experimental/.github/workflows/bake.yml.*$`],
    ['docker/dockerfile-upstream:master@sha256:3e8cd5ebf48acd1a1939649ad1c62ca44c029852b22493c16a9307b654334958', `^https://github.com/docker/github-builder-experimental/.github/workflows/bake.yml.*$`]
  ])(
    'given %p',
    async (image, certificateIdentityRegexp) => {
-      const sigstore = new Sigstore();
      const verifyResults = await sigstore.verifyImageAttestations(image, {
        certificateIdentityRegexp: certificateIdentityRegexp
      });
@@ -114,7 +149,6 @@ maybe('verifyImageAttestations', () => {
  );

  it('default platform', async () => {
-    const sigstore = new Sigstore();
    const verifyResults = await sigstore.verifyImageAttestations('moby/buildkit:master@sha256:84014da3581b2ff2c14cb4f60029cf9caa272b79e58f2e89c651ea6966d7a505', {
      certificateIdentityRegexp: `^https://github.com/docker/github-builder-experimental/.github/workflows/bake.yml.*$`,
      platform: OCI.defaultPlatform()
@@ -161,8 +195,17 @@ maybeIdToken('signProvenanceBlobs', () => {
 });

 maybeIdToken('verifySignedArtifacts', () => {
+  let sigstore: Sigstore;
+
+  beforeAll(async () => {
+    sigstore = new Sigstore({
+      cosign: new Cosign({
+        binPath: await installCosign(currentCosignVersion)
+      })
+    });
+  }, 100000);
+
  it('sign and verify', async () => {
-    const sigstore = new Sigstore();
    const signResults = await sigstore.signProvenanceBlobs({
      localExportDir: path.join(fixturesDir, 'sigstore', 'multi')
    });
--- a/dev.Dockerfile
+++ b/dev.Dockerfile
@@ -15,12 +15,12 @@
 # limitations under the License.

 ARG NODE_VERSION=24
-ARG DOCKER_VERSION=29.2
-ARG BUILDX_VERSION=0.32.1
-ARG COMPOSE_VERSION=2.39.1
-ARG UNDOCK_VERSION=0.10.0
-ARG REGCTL_VERSION=v0.8.2
-ARG COSIGN_VERSION=v3.0.3
+ARG DOCKER_VERSION=29.3
+ARG BUILDX_VERSION=0.33.0
+ARG COMPOSE_VERSION=5.1.1
+ARG UNDOCK_VERSION=0.11.0
+ARG REGCTL_VERSION=v0.11.2
+ARG COSIGN_VERSION=v3.0.5

 FROM node:${NODE_VERSION}-alpine AS base
 RUN apk add --no-cache cpio findutils git
--- a/package.json
+++ b/package.json
@@ -57,7 +57,7 @@
    "async-retry": "^1.3.3",
    "csv-parse": "^6.2.1",
    "gunzip-maybe": "^1.4.2",
-    "handlebars": "^4.7.8",
+    "handlebars": "^4.7.9",
    "he": "^1.2.0",
    "js-yaml": "^4.1.1",
    "jwt-decode": "^4.0.0",
--- a/src/buildx/build.ts
+++ b/src/buildx/build.ts
@@ -79,13 +79,17 @@ export class Build {
    const baseURL = `${GitHub.serverURL}/${github.context.repo.owner}/${github.context.repo.repo}.git`;
    let format = opts?.format;
    if (!format) {
-      const sendGitQueryAsInput = Util.parseBoolOrDefault(process.env.BUILDX_SEND_GIT_QUERY_AS_INPUT);
+      format = 'fragment';
      if (attrs.length > 0) {
        format = 'query';
-      } else if (sendGitQueryAsInput && (await this.buildx.versionSatisfies('>=0.29.0'))) {
-        format = 'query';
-      } else {
-        format = 'fragment';
+      } else if (Util.parseBoolOrDefault(process.env.BUILDX_SEND_GIT_QUERY_AS_INPUT)) {
+        try {
+          if (await this.buildx.versionSatisfies('>=0.29.0')) {
+            format = 'query';
+          }
+        } catch {
+          // keep fragment fallback when Buildx version cannot be determined.
+        }
      }
    }
    if (format === 'query') {
--- a/src/cosign/cosign.ts
+++ b/src/cosign/cosign.ts
@@ -38,7 +38,7 @@ export interface CosignCommandError {
 }

 export class Cosign {
-  private readonly binPath: string;
+  public readonly binPath: string;
  private _version: string;
  private _versionOnce: boolean;

--- a/src/sigstore/sigstore.ts
+++ b/src/sigstore/sigstore.ts
@@ -55,6 +55,8 @@ export interface SigstoreOpts {
  imageTools?: ImageTools;
 }

+const COSIGN_PREDICATE_SLSA_PROVENANCE_V1 = 'slsaprovenance1';
+
 export class Sigstore {
  private readonly cosign: Cosign;
  private readonly imageTools: ImageTools;
@@ -95,7 +97,7 @@ export class Sigstore {
          if (noTransparencyLog) {
            createConfigArgs.push('--no-default-rekor=true');
          }
-          await Exec.exec('cosign', createConfigArgs, {
+          await Exec.exec(this.cosign.binPath, createConfigArgs, {
            env: Object.assign({}, process.env, {
              COSIGN_EXPERIMENTAL: '1'
            }) as {
@@ -130,8 +132,8 @@ export class Sigstore {
              '--new-bundle-format',
              ...cosignExtraArgs
            ];
-            core.info(`[command]cosign ${[...cosignArgs, attestationRef].join(' ')}`);
-            const execRes = await Exec.getExecOutput('cosign', ['--verbose', ...cosignArgs, attestationRef], {
+            core.info(`[command]${this.cosign.binPath} ${[...cosignArgs, attestationRef].join(' ')}`);
+            const execRes = await Exec.getExecOutput(this.cosign.binPath, ['--verbose', ...cosignArgs, attestationRef], {
              ignoreReturnCode: true,
              silent: true,
              env: Object.assign({}, process.env, {
@@ -227,8 +229,8 @@ export class Sigstore {
    }

    if (!opts.retryOnManifestUnknown) {
-      core.info(`[command]cosign ${[...cosignArgs, attestationRef].join(' ')}`);
-      const execRes = await Exec.getExecOutput('cosign', ['--verbose', ...cosignArgs, attestationRef], {
+      core.info(`[command]${this.cosign.binPath} ${[...cosignArgs, attestationRef].join(' ')}`);
+      const execRes = await Exec.getExecOutput(this.cosign.binPath, ['--verbose', ...cosignArgs, attestationRef], {
        ignoreReturnCode: true,
        silent: true,
        env: Object.assign({}, process.env, {
@@ -248,9 +250,9 @@ export class Sigstore {

    const retries = opts.retryLimit ?? 15;
    let lastError: Error | undefined;
-    core.info(`[command]cosign ${[...cosignArgs, attestationRef].join(' ')}`);
+    core.info(`[command]${this.cosign.binPath} ${[...cosignArgs, attestationRef].join(' ')}`);
    for (let attempt = 0; attempt < retries; attempt++) {
-      const execRes = await Exec.getExecOutput('cosign', ['--verbose', ...cosignArgs, attestationRef], {
+      const execRes = await Exec.getExecOutput(this.cosign.binPath, ['--verbose', ...cosignArgs, attestationRef], {
        ignoreReturnCode: true,
        silent: true,
        env: Object.assign({}, process.env, {
@@ -352,13 +354,14 @@ export class Sigstore {
            'verify-blob-attestation',
            '--new-bundle-format',
            '--certificate-oidc-issuer', 'https://token.actions.githubusercontent.com',
-            '--certificate-identity-regexp', opts.certificateIdentityRegexp
+            '--certificate-identity-regexp', opts.certificateIdentityRegexp,
+            '--type', opts.predicateType ?? COSIGN_PREDICATE_SLSA_PROVENANCE_V1
          ]
          if (opts.noTransparencyLog || !signedRes.tlogID) {
            // if there is no tlog entry, we skip tlog verification but still verify the signed timestamp
            cosignArgs.push('--use-signed-timestamps', '--insecure-ignore-tlog');
          }
-          const execRes = await Exec.getExecOutput('cosign', [...cosignArgs, '--bundle', signedRes.bundlePath, artifactPath], {
+          const execRes = await Exec.getExecOutput(this.cosign.binPath, [...cosignArgs, '--bundle', signedRes.bundlePath, artifactPath], {
            ignoreReturnCode: true
          });
          if (execRes.stderr.length > 0 && execRes.exitCode != 0) {
--- a/src/types/sigstore/sigstore.ts
+++ b/src/types/sigstore/sigstore.ts
@@ -73,6 +73,7 @@ export interface SignProvenanceBlobsResult extends ParsedBundle {
 }

 export interface VerifySignedArtifactsOpts {
+  predicateType?: string;
  certificateIdentityRegexp: string;
  noTransparencyLog?: boolean;
 }
--- a/yarn.lock
+++ b/yarn.lock
@@ -401,7 +401,7 @@ __metadata:
    eslint-plugin-prettier: "npm:^5.5.5"
    globals: "npm:^17.3.0"
    gunzip-maybe: "npm:^1.4.2"
-    handlebars: "npm:^4.7.8"
+    handlebars: "npm:^4.7.9"
    he: "npm:^1.2.0"
    js-yaml: "npm:^4.1.1"
    jwt-decode: "npm:^4.0.0"
@@ -1951,12 +1951,12 @@ __metadata:
  linkType: hard

 "brace-expansion@npm:^1.1.7":
-  version: 1.1.12
-  resolution: "brace-expansion@npm:1.1.12"
+  version: 1.1.13
+  resolution: "brace-expansion@npm:1.1.13"
  dependencies:
    balanced-match: "npm:^1.0.0"
    concat-map: "npm:0.0.1"
-  checksum: 10/12cb6d6310629e3048cadb003e1aca4d8c9bb5c67c3c321bafdd7e7a50155de081f78ea3e0ed92ecc75a9015e784f301efc8132383132f4f7904ad1ac529c562
+  checksum: 10/b5f4329fdbe9d2e25fa250c8f866ebd054ba946179426e99b86dcccddabdb1d481f0e40ee5430032e62a7d0a6c2837605ace6783d015aa1d65d85ca72154d936
  languageName: node
  linkType: hard

@@ -2948,9 +2948,9 @@ __metadata:
  languageName: node
  linkType: hard

-"handlebars@npm:^4.7.8":
-  version: 4.7.8
-  resolution: "handlebars@npm:4.7.8"
+"handlebars@npm:^4.7.9":
+  version: 4.7.9
+  resolution: "handlebars@npm:4.7.9"
  dependencies:
    minimist: "npm:^1.2.5"
    neo-async: "npm:^2.6.2"
@@ -2962,7 +2962,7 @@ __metadata:
      optional: true
  bin:
    handlebars: bin/handlebars
-  checksum: 10/bd528f4dd150adf67f3f857118ef0fa43ff79a153b1d943fa0a770f2599e38b25a7a0dbac1a3611a4ec86970fd2325a81310fb788b5c892308c9f8743bd02e11
+  checksum: 10/e755433d652e8a15fc02f83d7478e652359e7a4d354c4328818853ed4f8a39d4a09e1d22dad3c7213c5240864a65b3c840970b8b181745575dd957dd258f2b8d
  languageName: node
  linkType: hard

@@ -4018,9 +4018,9 @@ __metadata:
  linkType: hard

 "picomatch@npm:^4.0.3":
-  version: 4.0.3
-  resolution: "picomatch@npm:4.0.3"
-  checksum: 10/57b99055f40b16798f2802916d9c17e9744e620a0db136554af01d19598b96e45e2f00014c91d1b8b13874b80caa8c295b3d589a3f72373ec4aaf54baa5962d5
+  version: 4.0.4
+  resolution: "picomatch@npm:4.0.4"
+  checksum: 10/f6ef80a3590827ce20378ae110ac78209cc4f74d39236370f1780f957b7ee41c12acde0e4651b90f39983506fd2f5e449994716f516db2e9752924aff8de93ce
  languageName: node
  linkType: hard

@@ -4916,8 +4916,8 @@ __metadata:
  linkType: hard

 "vite@npm:^6.0.0 || ^7.0.0":
-  version: 7.3.1
-  resolution: "vite@npm:7.3.1"
+  version: 7.3.2
+  resolution: "vite@npm:7.3.2"
  dependencies:
    esbuild: "npm:^0.27.0"
    fdir: "npm:^6.5.0"
@@ -4966,7 +4966,7 @@ __metadata:
      optional: true
  bin:
    vite: bin/vite.js
-  checksum: 10/62e48ffa4283b688f0049005405a004447ad38ffc99a0efea4c3aa9b7eed739f7402b43f00668c0ee5a895b684dc953d62f0722d8a92c5b2f6c95f051bceb208
+  checksum: 10/c5f7a9a60011c41c836cedf31c8ee7624102aff9b6a7f3aab2ff47639721bba0916f81994c3a3ea6577a16c4f0dfee1e7dbd244e0da8edd5954e3c6d48daaaa2
  languageName: node
  linkType: hard
Author	SHA1	Message	Date
CrazyMax	4234ae887e	Merge pull request #1061 from docker/test-sigstore-timeout Some checks failed publish / publish (push) Has been cancelled Details sigstore: wire tests to explicit cosign binaries	2026-04-08 12:25:19 +02:00
CrazyMax	6b70c3ac3a	sigstore: wire tests to explicit cosign binaries Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>	2026-04-08 12:15:42 +02:00
CrazyMax	638fb92de8	Merge pull request #1060 from crazy-max/sigstore-fix-verified-blob sigstore: default blob attestation verification to SLSA provenance v1	2026-04-08 09:06:25 +02:00
CrazyMax	ab22ca5180	sigstore: default blob attestation verification to SLSA provenance v1 Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>	2026-04-07 16:41:12 +02:00
CrazyMax	76d6a50711	Merge pull request #1059 from docker/bot/docker-releases-json Update `.github/docker-releases.json`	2026-04-07 14:58:56 +02:00
crazy-max	10d53b02ad	github: update .github/docker-releases.json Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>	2026-04-07 12:30:30 +00:00
CrazyMax	29f6dfe684	Merge pull request #1056 from docker/dependabot/npm_and_yarn/vite-7.3.2 build(deps): bump vite from 7.3.1 to 7.3.2	2026-04-07 09:58:04 +02:00
CrazyMax	60efcc66f6	Merge pull request #1057 from docker/bot/cosign-releases-json Update `.github/cosign-releases.json`	2026-04-07 09:57:46 +02:00
CrazyMax	8b91e0fb97	Merge pull request #1055 from docker/bot/docker-releases-json Update `.github/docker-releases.json`	2026-04-07 09:57:29 +02:00
crazy-max	95cf5badfe	github: update .github/cosign-releases.json Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>	2026-04-07 00:20:52 +00:00
dependabot[bot]	5ce6d8499c	build(deps): bump vite from 7.3.1 to 7.3.2 Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 7.3.1 to 7.3.2. - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v7.3.2/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v7.3.2/packages/vite) --- updated-dependencies: - dependency-name: vite dependency-version: 7.3.2 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	2026-04-06 22:40:24 +00:00
crazy-max	cd33c690bf	github: update .github/docker-releases.json Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>	2026-04-04 00:44:48 +00:00
CrazyMax	aef1d233d6	Merge pull request #1054 from crazy-max/buildkit-0.29.0 update buildkit to 0.29.0 and buildx to 0.33.0	2026-03-31 18:29:02 +02:00
CrazyMax	56d608e044	update buildkit to 0.29.0 and buildx to 0.33.0 Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>	2026-03-31 18:12:44 +02:00
CrazyMax	40bb1df6da	Merge pull request #1053 from docker/bot/buildx-releases-json Update `.github/buildx-releases.json`	2026-03-31 17:36:26 +02:00
crazy-max	a1e2d6a054	github: update .github/buildx-releases.json Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>	2026-03-31 15:35:42 +00:00
CrazyMax	5e187be740	Merge pull request #1049 from docker/dependabot/github_actions/crazy-max-dot-github-e80592674b build(deps): bump the crazy-max-dot-github group with 3 updates	2026-03-31 09:41:14 +02:00
CrazyMax	eb2beba50e	Merge pull request #1052 from docker/dependabot/github_actions/github/codeql-action-4.35.1 build(deps): bump github/codeql-action from 4.34.1 to 4.35.1	2026-03-31 09:40:53 +02:00
CrazyMax	bc2e9f0a20	Merge pull request #1050 from docker/dependabot/github_actions/codecov/codecov-action-6.0.0 build(deps): bump codecov/codecov-action from 5.5.4 to 6.0.0	2026-03-31 09:40:36 +02:00
CrazyMax	31584ad49f	Merge pull request #1051 from docker/dependabot/github_actions/crazy-max/ghaction-dump-context-3.0.0 build(deps): bump crazy-max/ghaction-dump-context from 2.3.0 to 3.0.0	2026-03-31 09:40:13 +02:00
dependabot[bot]	4c3e16190f	build(deps): bump github/codeql-action from 4.34.1 to 4.35.1 Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.34.1 to 4.35.1. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](`3869755554...c10b8064de`) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.35.1 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	2026-03-30 23:10:17 +00:00
dependabot[bot]	b46b0e4e98	build(deps): bump crazy-max/ghaction-dump-context from 2.3.0 to 3.0.0 Bumps [crazy-max/ghaction-dump-context](https://github.com/crazy-max/ghaction-dump-context) from 2.3.0 to 3.0.0. - [Release notes](https://github.com/crazy-max/ghaction-dump-context/releases) - [Commits](`5355a8e5e6...5d2753e707`) --- updated-dependencies: - dependency-name: crazy-max/ghaction-dump-context dependency-version: 3.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>	2026-03-30 23:08:19 +00:00
dependabot[bot]	cbbecf4971	build(deps): bump codecov/codecov-action from 5.5.4 to 6.0.0 Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 5.5.4 to 6.0.0. - [Release notes](https://github.com/codecov/codecov-action/releases) - [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md) - [Commits](`75cd11691c...57e3a136b7`) --- updated-dependencies: - dependency-name: codecov/codecov-action dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>	2026-03-30 23:08:15 +00:00
dependabot[bot]	365134329e	build(deps): bump the crazy-max-dot-github group with 3 updates Bumps the crazy-max-dot-github group with 3 updates: [crazy-max/.github/.github/workflows/releases-json.yml](https://github.com/crazy-max/.github), [crazy-max/.github/.github/workflows/pr-assign-author.yml](https://github.com/crazy-max/.github) and [crazy-max/.github/.github/workflows/zizmor.yml](https://github.com/crazy-max/.github). Updates `crazy-max/.github/.github/workflows/releases-json.yml` from 1.1.0 to 1.3.0 - [Release notes](https://github.com/crazy-max/.github/releases) - [Commits](`20ef82212d...bb328ea508`) Updates `crazy-max/.github/.github/workflows/pr-assign-author.yml` from 1.1.0 to 1.3.0 - [Release notes](https://github.com/crazy-max/.github/releases) - [Commits](`20ef82212d...bb328ea508`) Updates `crazy-max/.github/.github/workflows/zizmor.yml` from 1.2.0 to 1.3.0 - [Release notes](https://github.com/crazy-max/.github/releases) - [Commits](`bbd31df64e...bb328ea508`) --- updated-dependencies: - dependency-name: crazy-max/.github/.github/workflows/releases-json.yml dependency-version: 1.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: crazy-max-dot-github - dependency-name: crazy-max/.github/.github/workflows/pr-assign-author.yml dependency-version: 1.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: crazy-max-dot-github - dependency-name: crazy-max/.github/.github/workflows/zizmor.yml dependency-version: 1.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: crazy-max-dot-github ... Signed-off-by: dependabot[bot] <support@github.com>	2026-03-30 23:08:03 +00:00
CrazyMax	cde20d56a4	Merge pull request #1048 from docker/dependabot/npm_and_yarn/brace-expansion-1.1.13 build(deps): bump brace-expansion from 1.1.12 to 1.1.13	2026-03-30 11:06:10 +02:00
dependabot[bot]	9e00c79a5a	build(deps): bump brace-expansion from 1.1.12 to 1.1.13 Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion) from 1.1.12 to 1.1.13. - [Release notes](https://github.com/juliangruber/brace-expansion/releases) - [Commits](https://github.com/juliangruber/brace-expansion/compare/v1.1.12...v1.1.13) --- updated-dependencies: - dependency-name: brace-expansion dependency-version: 1.1.13 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	2026-03-28 01:49:44 +00:00
CrazyMax	dde76171da	Merge pull request #1047 from crazy-max/dockerfile-update-deps dockerfile: update dev dependencies	2026-03-27 17:16:27 +01:00
CrazyMax	161311a2ae	dockerfile: update dev dependencies Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>	2026-03-27 14:51:57 +01:00
CrazyMax	81bd676284	Merge pull request #1041 from crazy-max/buildkit-0.29.0-rc1 update buildkit to 0.29.0-rc1 and buildx to 0.33.0-rc1	2026-03-27 10:50:37 +01:00
CrazyMax	3da460dafc	Merge pull request #1045 from docker/dependabot/npm_and_yarn/handlebars-4.7.9 build(deps): bump handlebars from 4.7.8 to 4.7.9	2026-03-27 10:50:21 +01:00
CrazyMax	91c970e007	Merge pull request #1046 from crazy-max/zizmor zizmor workflow	2026-03-27 10:45:54 +01:00
CrazyMax	a4ec5f5780	fix zizmor findings Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>	2026-03-27 10:43:15 +01:00
CrazyMax	9242fb9941	zizmor workflow Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>	2026-03-27 10:30:32 +01:00
dependabot[bot]	38434e8823	build(deps): bump handlebars from 4.7.8 to 4.7.9 Bumps [handlebars](https://github.com/handlebars-lang/handlebars.js) from 4.7.8 to 4.7.9. - [Release notes](https://github.com/handlebars-lang/handlebars.js/releases) - [Changelog](https://github.com/handlebars-lang/handlebars.js/blob/v4.7.9/release-notes.md) - [Commits](https://github.com/handlebars-lang/handlebars.js/compare/v4.7.8...v4.7.9) --- updated-dependencies: - dependency-name: handlebars dependency-version: 4.7.9 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	2026-03-26 22:53:30 +00:00
CrazyMax	be7208651f	update buildkit to 0.29.0-rc1 and buildx to 0.33.0-rc1 Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>	2026-03-26 15:57:13 +01:00
CrazyMax	78126ab93d	Merge pull request #1039 from docker/dependabot/npm_and_yarn/picomatch-4.0.4 build(deps): bump picomatch from 4.0.3 to 4.0.4	2026-03-26 15:49:44 +01:00
CrazyMax	9b59922400	Merge pull request #1038 from docker/bot/docker-releases-json Update `.github/docker-releases.json`	2026-03-26 15:49:27 +01:00
CrazyMax	fbbcb5d563	Merge pull request #1040 from docker/bot/buildx-releases-json Update `.github/buildx-releases.json`	2026-03-26 15:49:08 +01:00
crazy-max	82c75d6f0c	github: update .github/buildx-releases.json Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>	2026-03-26 12:24:12 +00:00
dependabot[bot]	629e3bad0b	build(deps): bump picomatch from 4.0.3 to 4.0.4 Bumps [picomatch](https://github.com/micromatch/picomatch) from 4.0.3 to 4.0.4. - [Release notes](https://github.com/micromatch/picomatch/releases) - [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md) - [Commits](https://github.com/micromatch/picomatch/compare/4.0.3...4.0.4) --- updated-dependencies: - dependency-name: picomatch dependency-version: 4.0.4 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	2026-03-26 07:05:53 +00:00
crazy-max	d74bc4420e	github: update .github/docker-releases.json Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>	2026-03-26 00:48:10 +00:00
Tõnis Tiigi	7f3ea34932	Merge pull request #1037 from crazy-max/update-crazy-max-actions ci: bump crazy-max/.github to 1.1.0	2026-03-25 10:42:21 -07:00
CrazyMax	4ed493883c	Merge pull request #1033 from crazy-max/git-context-fallback buildx(build): simplify git context format fallback	2026-03-25 12:14:07 +01:00
CrazyMax	f44e3f98d2	ci: bump crazy-max/.github to 1.1.0 Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>	2026-03-25 12:12:29 +01:00
CrazyMax	512a30b8f2	buildx(build): simplify git context format fallback Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>	2026-03-24 14:52:31 +01:00