Skip to content

fix(deps): revert cosign-installer from 4.0.0 to 3.7.0#777

Merged
KrisF-Midnight merged 1 commit into
release/node-0.21.0from
SRE-1859/cherry-pick-cosign-v4-to-release-0.21.0
Feb 24, 2026
Merged

fix(deps): revert cosign-installer from 4.0.0 to 3.7.0#777
KrisF-Midnight merged 1 commit into
release/node-0.21.0from
SRE-1859/cherry-pick-cosign-v4-to-release-0.21.0

Conversation

@KrisF-Midnight

Copy link
Copy Markdown
Contributor

Cosign v3.x (installed by cosign-installer v4.0.0) drops support for Docker V2 manifests, causing intermittent "unsupported manifest format" errors when Earthly/BuildKit produces V2 instead of OCI manifests.

Reverting to cosign-installer v3.7.0 (cosign v2.4.1) which supports both Docker V2 and OCI manifest formats.

Overview

🗹 TODO before merging

  • Ready

📌 Submission Checklist

  • Changes are backward-compatible (or flagged if breaking)
  • Pull request description explains why the change is needed
  • Self-reviewed the diff
  • I have included a change file, or skipped for this reason:
  • If the changes introduce a new feature, I have bumped the node minor version
  • Update documentation (if relevant)
  • Updated AGENTS.md if build commands, architecture, or workflows changed
  • No new todos introduced

🧪 Testing Evidence

Please describe any additional testing aside from CI:

  • Additional tests are provided (if possible)

🔱 Fork Strategy

  • Node Runtime Update
  • Node Client Update
  • Other:
  • N/A

Links

Cosign v3.x (installed by cosign-installer v4.0.0) drops support for
Docker V2 manifests, causing intermittent "unsupported manifest format"
errors when Earthly/BuildKit produces V2 instead of OCI manifests.

Reverting to cosign-installer v3.7.0 (cosign v2.4.1) which supports
both Docker V2 and OCI manifest formats.
@KrisF-Midnight KrisF-Midnight self-assigned this Feb 24, 2026
@KrisF-Midnight KrisF-Midnight requested a review from a team as a code owner February 24, 2026 18:08
@KrisF-Midnight KrisF-Midnight merged commit e492ad2 into release/node-0.21.0 Feb 24, 2026
14 of 15 checks passed
@KrisF-Midnight KrisF-Midnight deleted the SRE-1859/cherry-pick-cosign-v4-to-release-0.21.0 branch February 24, 2026 18:11
gilescope pushed a commit that referenced this pull request Feb 25, 2026
Cosign v3.x (installed by cosign-installer v4.0.0) drops support for
Docker V2 manifests, causing intermittent "unsupported manifest format"
errors when Earthly/BuildKit produces V2 instead of OCI manifests.

Reverting to cosign-installer v3.7.0 (cosign v2.4.1) which supports
both Docker V2 and OCI manifest formats.

Signed-off-by: Giles Cope <gilescope@gmail.com>
whankinsiv pushed a commit to whankinsiv/midnight-node-acropolis that referenced this pull request Mar 4, 2026
…#777)

Cosign v3.x (installed by cosign-installer v4.0.0) drops support for
Docker V2 manifests, causing intermittent "unsupported manifest format"
errors when Earthly/BuildKit produces V2 instead of OCI manifests.

Reverting to cosign-installer v3.7.0 (cosign v2.4.1) which supports
both Docker V2 and OCI manifest formats.
gilescope pushed a commit that referenced this pull request Apr 8, 2026
* feat: change default multisig threshold to 1

* fix unit tests
m2ux added a commit that referenced this pull request Apr 23, 2026
* feat: change default multisig threshold to 1

* fix unit tests
Signed-off-by: Mike Clay <mike.clay@shielded.io>
m2ux added a commit that referenced this pull request Apr 23, 2026
* feat: change default multisig threshold to 1

* fix unit tests
Signed-off-by: Mike Clay <mike.clay@shielded.io>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants