Bump sigstore/cosign-installer from 2.4.1 to 2.5.0 (#33)

Author: dependabot[bot]

.github/workflows/release.yml

@@ -26,7 +26,7 @@ jobs:
         check-latest: true
 
     - name: Install cosign
-      uses: sigstore/cosign-installer@48866aa521d8bf870604709cd43ec2f602d03ff2 # v2.2.1
+      uses: sigstore/cosign-installer@09a077b27eb1310dcfb21981bee195b30ce09de0 # v2.2.1
 
     - name: Install GoReleaser
       uses: goreleaser/goreleaser-action@68acf3b1adf004ac9c2f0a4259e85c5f66e99bef # v2.9.1