chore(deps): update all github action

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
dagger/dagger		patch	v0.20.6 → v0.20.8
dagger/dagger		patch	0.20.6 → 0.20.8
sigstore/cosign-installer	action	patch	v4.1.1 → v4.1.2

---

Release Notes

dagger/dagger (dagger/dagger)

v0.20.8

Compare Source

v0.20.8 - 2026-05-06

Fixed

• Python SDK: fix v0.20.7 regressions where valid Python modules could fail to load correctly, especially when using patterns such as import aliases, inherited functions, relative imports, or module-level type aliases, by @​tiborvass in aa1721d (reverts commit bcb2193 backported from #​11803)
• Dang SDK: parallel initialization no longer panics or reports spurious typechecking errors by @​tiborvass in 53f1ae3 (backported from #​13098) and @​vito in ae5fc75 (backported from #​13103)

What to do next?

• Read the documentation
• Join our Discord server
• Follow us on Twitter

v0.20.7

Compare Source

v0.20.7 - 2026-04-30

Fixed

• Fix rare engine hangs when short-lived container processes leave runc run or runc exec stuck by @​sipsma in d2fd6b4 (backported from #​13078)
• Fix toolchain customization defaults so changing a default invalidates cached omitted-argument calls and returns the new value by @​shykes in dbab536 (backported from #​13047)
• Fix remote modules that install a toolchain from another repo so +defaultPath file inputs resolve from the module selected by -m, not from the toolchain repo or the caller's local workspace by @​tiborvass in 1c105d4
• Fix modules that install a toolchain so module code can call installed toolchain constructors and types from generated SDK bindings again by @​eunomie in d348571 (backported from #​12991)
• Fix dagger mcp so MCP clients and agents can use functions from the current workspace module again, instead of only generic or core tools by @​shykes in 104a5ec (backported from #​13030)
• Fix Docker-backed engines in cgroup subgroup environments by ensuring the engine image includes the init binary it needs to start correctly by @​marcosnils in 7a5f6e6 (backported from #​12999)
• Fix nested Dagger commands so explicit local NO_COLOR settings are preserved after telemetry initialization, avoiding unexpected ANSI color codes in parseable logs by @​sipsma in 3dbb010 (backported from #​13076)
• Fix LLM tool calls for providers such as AWS Bedrock by giving undocumented module functions a fallback tool description instead of an empty one by @​shykes in 4d49e17 (backported from #​12857)
• Fix git credential errors so failed credential helper output includes stderr, making authentication failures easier to diagnose by @​marcosnils in 588ce15 (backported from #​13048)
• Fix dagger functions and dagger call --help so constructor plumbing no longer appears as a confusing extra with function by @​eunomie in c50f40a (backported from #​13012)
• Dang SDK: fix built-in sdk: "dang" modules so calls to Go or TypeScript dependency modules complete instead of timing out while loading the dependency runtime by @​shykes in 4dba920 (backported from #​12975)
• Elixir SDK: fix dagger generate elixir-sdk so users can regenerate Elixir bindings from the current engine introspection schema by @​wingyplus in 983d5b0 (backported from #​12890)
• Python SDK: fix calls so they no longer stall for several seconds with repeated OpenTelemetry metrics exporter warnings when unsupported metrics are emitted by @​eunomie in d7a2709 (backported from #​13013)
• Python SDK: fix redundant image pulls in new modules by aligning the generated Python version requirement with the default runtime image for better cache-hit performance by @​eunomie in ede18a0 (backported from #​13027)
• Python SDK: fix terminal cleanup so dagger.connection() restores the cursor and stops the spinner with default logging settings by @​shykes in 12e1238 (backported from #​12835)
• Python SDK: fix module discovery so introspection no longer imports user modules by @​eunomie in 8d5362b (backported from #​11803)

Contributors

Special thanks to our external contributor this release!

• @​wingyplus

What to do next?

• Read the documentation
• Join our Discord server
• Follow us on Twitter

sigstore/cosign-installer (sigstore/cosign-installer)

v4.1.2

Compare Source

What's Changed

• Bump cosign to 3.0.6 in #​232

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.