Bump sigstore/cosign-installer from 2.8.1 to 3.1.2

[dependabot[bot]]

Bumps sigstore/cosign-installer from 2.8.1 to 3.1.2.

Release notes

Sourced from sigstore/cosign-installer's releases.

v3.1.2

What's Changed

• Fix build and push step Readme missing id by @​hbenali in sigstore/cosign-installer#138
• bump cosign to v2.2.0 by @​cpanato in sigstore/cosign-installer#142

New Contributors

• @​hbenali made their first contribution in sigstore/cosign-installer#138

Full Changelog: https://github.com/sigstore/cosign-installer/compare/v3...v3.1.2

v3.1.1

What's Changed

• default cosign to v2.1.1 by @​cpanato in sigstore/cosign-installer#137

Full Changelog: https://github.com/sigstore/cosign-installer/compare/v3.1.0...v3.1.1

v3.1.0

What's Changed

• update job to use latest action release by @​cpanato in sigstore/cosign-installer#130
• Update action example for keyless signing as xarg is not required by @​jbtrystram in sigstore/cosign-installer#132
• update examples by @​cpanato in sigstore/cosign-installer#133
• bump cosign to default to release v2.1.0 and update docs by @​cpanato in sigstore/cosign-installer#136

New Contributors

• @​jbtrystram made their first contribution in sigstore/cosign-installer#132

Full Changelog: https://github.com/sigstore/cosign-installer/compare/v3.0.5...v3.1.0

v3.0.5

What's Changed

• download cosign releases from GitHub rather than GCS by @​bobcallaway in sigstore/cosign-installer#126

Full Changelog: https://github.com/sigstore/cosign-installer/compare/v3.0.4...v3.0.5

v3.0.4

• Include fix for sigstore/cosign-installer#124
• changes download URL for cosign binary to github.com instead of GCS

v3.0.3

What's Changed

• bump to cosign v2.0.2 by @​bobcallaway in sigstore/cosign-installer#119
• changes download URL for cosign binary to github.com instead of GCS

Full Changelog: https://github.com/sigstore/cosign-installer/compare/v3.0.2...v3.0.3

v3.0.2

What's Changed

• add --yes to example workflow by @​sebhoss in sigstore/cosign-installer#110
• Fix aarch64 action run by @​ananos in sigstore/cosign-installer#113

... (truncated)

Commits

• 11086d2 bump cosign to v2.2.0 (#142)
• 4a86152 Bump actions/checkout from 3.5.3 to 3.6.0 (#141)
• 37f3871 Bump actions/setup-go from 4.0.1 to 4.1.0 (#139)
• a5d81fb Fix build and push step Readme missing id (#138)
• 6e04d22 default cosign to v2.1.1 (#137)
• d130283 bump cosign to default to release v2.1.0 and update docs (#136)
• ef0e969 Bump actions/checkout from 3.5.2 to 3.5.3 (#134)
• 871cdc7 update examples (#133)
• 60bbdf4 Update action example for keyless signing as xarg is not required (#132)
• 1b9f7b6 update job to use latest action release (#130)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot[bot]]

Superseded by #299.