Merge branch 'main' into fix-cosign-again

Author: sfotony

.goreleaser.yml

@@ -22,10 +22,9 @@ builds:
 signs:
   - cmd: cosign
     env: [COSIGN_EXPERIMENTAL=1]
-    signature: ${artifact}.bundle
     args:
       - sign-blob
-      - --bundle=${signature}
+      - --bundle=${signature}.bundle
       - ${artifact}
       - --yes  # needed on cosign 2.0.0+
     artifacts: checksum