fix(deps): update go dependencies (#117)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Author: renovate[bot]

.github/workflows/build.yaml

@@ -255,7 +255,7 @@ jobs:
 
       # Install cosign for signing
       - name: Install Cosign
-        uses: sigstore/cosign-installer@v4.1.1
+        uses: sigstore/cosign-installer@v4.1.2
 
       # Install syft for SBOM generation
       - name: Install Syft

go.mod

@@ -3,7 +3,7 @@ module github.com/ibm-hyper-protect/contract-cli
 go 1.26.1
 
 require (
-	github.com/ibm-hyper-protect/contract-go/v2 v2.23.0
+	github.com/ibm-hyper-protect/contract-go/v2 v2.26.0
 	github.com/spf13/cobra v1.10.2
 	github.com/spf13/pflag v1.0.10
 	github.com/stretchr/testify v1.11.1

go.sum

@@ -5,6 +5,8 @@ github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c
 github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
 github.com/ibm-hyper-protect/contract-go/v2 v2.23.0 h1:pFzSzamtaD7Akf7rrM/yDQZmu1fS4/p7U7hFanbdRpY=
 github.com/ibm-hyper-protect/contract-go/v2 v2.23.0/go.mod h1:tbxT+1Xpl4jyYhK2scBO/OTl7/iM2HOoAQxkjdbnY7A=
+github.com/ibm-hyper-protect/contract-go/v2 v2.26.0 h1:2f0xIZ+OLujVgX6f0Ic5Q+Q5AJWt6q/SHRlAJ6ZVcQ8=
+github.com/ibm-hyper-protect/contract-go/v2 v2.26.0/go.mod h1:tbxT+1Xpl4jyYhK2scBO/OTl7/iM2HOoAQxkjdbnY7A=
 github.com/inconshreveable/mousetrap v1.1.0 h1:wN+x4NVGpMsO7ErUn/mUI3vEoE6Jt13X2s0bqwp9tc8=
 github.com/inconshreveable/mousetrap v1.1.0/go.mod h1:vpF70FUmC8bwa3OWnCshd2FqLfsEA9PFc4w1p2J65bw=
 github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=

samples/tgz/docker-compose.yaml

@@ -1,3 +1,3 @@
 services:
   hello-world:
-    image: docker.io/library/hello-world@sha256:f9078146db2e05e794366b1bfe584a14ea6317f44027d10ef7dad65279026885
+    image: docker.io/library/hello-world@sha256:0e760fdfbc48ba8041e7c6db999bb40bfca508b4be580ac75d32c4e29d202ce1