Version bump

- GCP helper to v2.1.28
- sigstore/cosign to v2.5.0

Signed-off-by: Brandon Mitchell <git@bmitch.net>

.github/workflows/docker.yml

@@ -121,7 +121,7 @@ jobs:
       if: github.event_name != 'pull_request' && github.repository_owner == 'regclient'
       uses: sigstore/cosign-installer@d7d6bc7722e3daa8354c50bcb52f4837da5e9b6a # v3.8.1
       with:
-        cosign-release: "v2.4.3"
+        cosign-release: "v2.5.0"
     
     - name: Install syft
       if: github.event_name != 'pull_request' && github.repository_owner == 'regclient'

.github/workflows/go.yml

@@ -73,7 +73,7 @@ jobs:
       if: ( startsWith( github.ref, 'refs/tags/v' ) || github.ref == 'refs/heads/main' ) && matrix.gover == env.RELEASE_GO_VER
       uses: sigstore/cosign-installer@d7d6bc7722e3daa8354c50bcb52f4837da5e9b6a # v3.8.1
       with:
-        cosign-release: "v2.4.3"
+        cosign-release: "v2.5.0"
 
     - name: Package artifacts
       if: ( startsWith( github.ref, 'refs/tags/v' ) || github.ref == 'refs/heads/main' ) && matrix.gover == env.RELEASE_GO_VER

.version-bump.lock

@@ -1,7 +1,7 @@
 {"name":"docker-arg-alpine-digest","key":"docker.io/library/alpine:3.21.3","version":"sha256:a8560b36e8b8210634f77d9f7f9efd7ffa463e380b75e2e74aff4511df3ef88c"}
 {"name":"docker-arg-alpine-tag","key":"docker.io/library/alpine","version":"3.21.3"}
 {"name":"docker-arg-ecr","key":"https://github.com/awslabs/amazon-ecr-credential-helper.git:main","version":"a72d01f94f8baa4d6aac3e2a005c85d86c75f406"}
-{"name":"docker-arg-gcr","key":"https://github.com/GoogleCloudPlatform/docker-credential-gcr.git","version":"v2.1.27"}
+{"name":"docker-arg-gcr","key":"https://github.com/GoogleCloudPlatform/docker-credential-gcr.git","version":"v2.1.28"}
 {"name":"docker-arg-go-digest","key":"docker.io/library/golang:1.24.2-alpine","version":"sha256:7772cb5322baa875edd74705556d08f0eeca7b9c4b5367754ce3f2f00041ccee"}
 {"name":"docker-arg-go-tag","key":"docker.io/library/golang","version":"1.24.2"}
 {"name":"docker-arg-lunajson","key":"https://github.com/grafi-tt/lunajson.git:master","version":"3d10600874527d71519b33ecbb314eb93ccd1df6"}
@@ -9,7 +9,7 @@
 {"name":"gha-alpine-digest","key":"docker.io/library/alpine:3.21.3","version":"sha256:a8560b36e8b8210634f77d9f7f9efd7ffa463e380b75e2e74aff4511df3ef88c"}
 {"name":"gha-alpine-tag-base","key":"docker.io/library/alpine","version":"3"}
 {"name":"gha-alpine-tag-comment","key":"docker.io/library/alpine","version":"3.21.3"}
-{"name":"gha-cosign-version","key":"https://github.com/sigstore/cosign.git","version":"v2.4.3"}
+{"name":"gha-cosign-version","key":"https://github.com/sigstore/cosign.git","version":"v2.5.0"}
 {"name":"gha-golang-matrix","key":"golang-matrix","version":"[\"1.22\", \"1.23\", \"1.24\"]"}
 {"name":"gha-golang-release","key":"golang-latest","version":"1.24"}
 {"name":"gha-syft-version","key":"docker.io/anchore/syft","version":"v1.22.0"}

build/Dockerfile.regbot

@@ -2,7 +2,7 @@ ARG REGISTRY=docker.io
 ARG ALPINE_VER=3.21.3@sha256:a8560b36e8b8210634f77d9f7f9efd7ffa463e380b75e2e74aff4511df3ef88c
 ARG GO_VER=1.24.2-alpine@sha256:7772cb5322baa875edd74705556d08f0eeca7b9c4b5367754ce3f2f00041ccee
 ARG ECR_HELPER_VER=a72d01f94f8baa4d6aac3e2a005c85d86c75f406
-ARG GCR_HELPER_VER=v2.1.27
+ARG GCR_HELPER_VER=v2.1.28
 ARG LUNAJSON_COMMIT=3d10600874527d71519b33ecbb314eb93ccd1df6
 ARG SEMVER_COMMIT=a4b708ba243208d46e575da870af969dca46a94d
 

build/Dockerfile.regbot.buildkit

@@ -4,7 +4,7 @@ ARG REGISTRY=docker.io
 ARG ALPINE_VER=3.21.3@sha256:a8560b36e8b8210634f77d9f7f9efd7ffa463e380b75e2e74aff4511df3ef88c
 ARG GO_VER=1.24.2-alpine@sha256:7772cb5322baa875edd74705556d08f0eeca7b9c4b5367754ce3f2f00041ccee
 ARG ECR_HELPER_VER=a72d01f94f8baa4d6aac3e2a005c85d86c75f406
-ARG GCR_HELPER_VER=v2.1.27
+ARG GCR_HELPER_VER=v2.1.28
 ARG LUNAJSON_COMMIT=3d10600874527d71519b33ecbb314eb93ccd1df6
 ARG SEMVER_COMMIT=a4b708ba243208d46e575da870af969dca46a94d
 

build/Dockerfile.regctl

@@ -2,7 +2,7 @@ ARG REGISTRY=docker.io
 ARG ALPINE_VER=3.21.3@sha256:a8560b36e8b8210634f77d9f7f9efd7ffa463e380b75e2e74aff4511df3ef88c
 ARG GO_VER=1.24.2-alpine@sha256:7772cb5322baa875edd74705556d08f0eeca7b9c4b5367754ce3f2f00041ccee
 ARG ECR_HELPER_VER=a72d01f94f8baa4d6aac3e2a005c85d86c75f406
-ARG GCR_HELPER_VER=v2.1.27
+ARG GCR_HELPER_VER=v2.1.28
 
 FROM ${REGISTRY}/library/golang:${GO_VER} AS golang
 RUN apk add --no-cache \

build/Dockerfile.regctl.buildkit

@@ -4,7 +4,7 @@ ARG REGISTRY=docker.io
 ARG ALPINE_VER=3.21.3@sha256:a8560b36e8b8210634f77d9f7f9efd7ffa463e380b75e2e74aff4511df3ef88c
 ARG GO_VER=1.24.2-alpine@sha256:7772cb5322baa875edd74705556d08f0eeca7b9c4b5367754ce3f2f00041ccee
 ARG ECR_HELPER_VER=a72d01f94f8baa4d6aac3e2a005c85d86c75f406
-ARG GCR_HELPER_VER=v2.1.27
+ARG GCR_HELPER_VER=v2.1.28
 
 FROM --platform=$BUILDPLATFORM ${REGISTRY}/library/golang:${GO_VER} AS golang
 RUN apk add --no-cache \

build/Dockerfile.regsync

@@ -2,7 +2,7 @@ ARG REGISTRY=docker.io
 ARG ALPINE_VER=3.21.3@sha256:a8560b36e8b8210634f77d9f7f9efd7ffa463e380b75e2e74aff4511df3ef88c
 ARG GO_VER=1.24.2-alpine@sha256:7772cb5322baa875edd74705556d08f0eeca7b9c4b5367754ce3f2f00041ccee
 ARG ECR_HELPER_VER=a72d01f94f8baa4d6aac3e2a005c85d86c75f406
-ARG GCR_HELPER_VER=v2.1.27
+ARG GCR_HELPER_VER=v2.1.28
 
 FROM ${REGISTRY}/library/golang:${GO_VER} AS golang
 RUN apk add --no-cache \

build/Dockerfile.regsync.buildkit

@@ -4,7 +4,7 @@ ARG REGISTRY=docker.io
 ARG ALPINE_VER=3.21.3@sha256:a8560b36e8b8210634f77d9f7f9efd7ffa463e380b75e2e74aff4511df3ef88c
 ARG GO_VER=1.24.2-alpine@sha256:7772cb5322baa875edd74705556d08f0eeca7b9c4b5367754ce3f2f00041ccee
 ARG ECR_HELPER_VER=a72d01f94f8baa4d6aac3e2a005c85d86c75f406
-ARG GCR_HELPER_VER=v2.1.27
+ARG GCR_HELPER_VER=v2.1.28
 
 FROM --platform=$BUILDPLATFORM ${REGISTRY}/library/golang:${GO_VER} AS golang
 RUN apk add --no-cache \