fix: signing by goreleaser

[msvticket]

jx doesn't build since the artefact signin by cosign fails

The cause seem to be described here https://blog.sigstore.dev/tuf-root-update/ and should be resolved by upgrading cosign

[jenkins-x-bot]

[jx-info] Hi, we've detected that the pipelines in this repository are using a syntax that will soon be deprecated.
We'll continue to update you through PRs as we progress. Please check #8589 for further information.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 34.62%. Comparing base (ef5e66c) to head (0844bad).

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #8658   +/-   ##
=======================================
  Coverage   34.62%   34.62%           
=======================================
  Files          11       11           
  Lines        1242     1242           
=======================================
  Hits          430      430           
  Misses        767      767           
  Partials       45       45           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[msvticket]

/approve

[jenkins-x-bot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: msvticket

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [msvticket]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[jenkins-x-bot]

Failed to merge this PR due to:

failed merging [8658]: [Method Not Allowed]