Merge branch 'renovate/sigstore-cosign-2.x' into 'main'

chore(deps): update dependency sigstore/cosign to v2.5.0

See merge request components/opentofu!264

Dockerfile.debian

@@ -23,7 +23,7 @@ RUN apt-get update && apt-get install -y \
   && rm -rf /var/lib/apt/lists/*
 
 # NOTE: cosign is not yet available in the debian apt sources
-ARG COSIGN_VERSION=2.4.3
+ARG COSIGN_VERSION=2.5.0
 WORKDIR /tmp
 RUN wget https://github.com/sigstore/cosign/releases/download/v${COSIGN_VERSION}/cosign_${COSIGN_VERSION}_${TARGETARCH}.deb && \
     dpkg -i *.deb && \