chore(deps): Bump the actions-updates group with 2 updates (#124)

Author: dependabot[bot]

.github/workflows/ci-actions.yaml

@@ -29,7 +29,7 @@ jobs:
           persist-credentials: false
 
       - name: Install the latest version of uv
-        uses: astral-sh/setup-uv@557e51de59eb14aaaba2ed9621916900a91d50c6 # v4
+        uses: astral-sh/setup-uv@b75a909f75acd358c2196fb9a5f1299a9a8868a4 # v4
 
       - name: Run zizmor
         run: uvx zizmor --pedantic --format sarif . > results.sarif 

.github/workflows/release.yaml

@@ -80,7 +80,7 @@ jobs:
           push: true
 
       - name: 'Install cosign'
-        uses: sigstore/cosign-installer@d58896d6a1865668819e1d91763c7751a165e159 # v3.9.2
+        uses: sigstore/cosign-installer@d7543c93d881b35a8faa02e8e3605f69b7a1ce62 # v3.10.0
 
       - name: 'Cosign sign all images'
         shell: bash