Merge pull request #1771 from carvel-dev/dependabot/github_actions/sigstore/cosign-installer-4.0.0

Bump sigstore/cosign-installer from 3.9.1 to 4.0.0

Author: devacts

.github/workflows/release-process.yml

@@ -42,7 +42,7 @@ jobs:
           go-version-file: go.mod
 
       - name: Set up Cosign
-        uses: sigstore/cosign-installer@v3.9.1
+        uses: sigstore/cosign-installer@v4.0.0
 
       - name: Run release script
         run: |