chore(deps): update all non-major dependencies in .github/workflows/release.yml

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	OpenSSF
docker/setup-buildx-action	action	minor	v3.8.0 -> v3.9.0
docker/setup-qemu-action	action	digest	53851d1 -> 4574d27
docker/setup-qemu-action	action	minor	v3.3.0 -> v3.4.0
github/codeql-action	action	patch	v3.28.8 -> v3.28.9
golangci/golangci-lint-action	action	digest	ec5d184 -> 2e78893
sigstore/cosign-installer	action	minor	v3.7.0 -> v3.8.0

---

Release Notes

docker/setup-buildx-action (docker/setup-buildx-action)

v3.9.0

Compare Source

• Bump @​docker/actions-toolkit from 0.48.0 to 0.54.0 in https://github.com/docker/setup-buildx-action/pull/402 https://github.com/docker/setup-buildx-action/pull/404

Full Changelog: docker/setup-buildx-action@v3.8.0...v3.9.0

docker/setup-qemu-action (docker/setup-qemu-action)

v3.4.0

Compare Source

• Bump @​docker/actions-toolkit from 0.49.0 to 0.54.0 in https://github.com/docker/setup-qemu-action/pull/193 https://github.com/docker/setup-qemu-action/pull/197

Full Changelog: docker/setup-qemu-action@v3.3.0...v3.4.0

github/codeql-action (github/codeql-action)

v3.28.9

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.9 - 07 Feb 2025

• Update default CodeQL bundle version to 2.20.4. #​2753

See the full CHANGELOG.md for more information.

sigstore/cosign-installer (sigstore/cosign-installer)

v3.8.0

Compare Source

What's Changed

• test action against all non-rc releases, verify entry in rekor log by @​bobcallaway in https://github.com/sigstore/cosign-installer/pull/179
• bump for cosign v2.4.2 release by @​bobcallaway in https://github.com/sigstore/cosign-installer/pull/181

Full Changelog: sigstore/cosign-installer@v3...v3.8.0

---

Configuration

📅 Schedule: Branch creation - "* 0-3 * * 1" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.