diff --git a/.github/workflows/ci-pipeline.yml b/.github/workflows/ci-pipeline.yml index f988907..974df98 100644 --- a/.github/workflows/ci-pipeline.yml +++ b/.github/workflows/ci-pipeline.yml @@ -127,7 +127,7 @@ jobs: # Install the cosign tool # https://github.com/sigstore/cosign-installer - name: Install cosign - uses: sigstore/cosign-installer@v3.9.1 + uses: sigstore/cosign-installer@v3.9.2 - name: Setup Docker buildx uses: docker/setup-buildx-action@v3.11.1 @@ -229,7 +229,7 @@ jobs: # Install the cosign tool # https://github.com/sigstore/cosign-installer - name: Install cosign - uses: sigstore/cosign-installer@v3.9.1 + uses: sigstore/cosign-installer@v3.9.2 - name: Setup Docker buildx uses: docker/setup-buildx-action@v3.11.1 diff --git a/Dockerfile b/Dockerfile index a80570b..970c8e9 100644 --- a/Dockerfile +++ b/Dockerfile @@ -34,7 +34,7 @@ RUN --mount=type=cache,target=/var/cache/apt,sharing=locked \ && apt-get install -y --no-install-recommends \ build-essential gcc git -COPY --from=ghcr.io/astral-sh/uv:0.7.20 /uv /uvx /bin/ +COPY --from=ghcr.io/astral-sh/uv:0.8.3 /uv /uvx /bin/ # From here we shouldn't need anymore a root user # Switch to nonroot and config uv