ci: Bump custom action versions

Bump the versions of our image publish custom action to make image
signing work again.

.github/actions/container-image-publish/action.yml

@@ -44,7 +44,7 @@ runs:
   steps:
     # Dockerfile and its dependencies live in the Installer
     - name: Checkout Installer repository
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
       with:
         repository: scVENUS/PeekabooAV-Installer
         # get all history, branches and tags because we figure out which to
@@ -124,7 +124,7 @@ runs:
 
     # put PeekabooAV below that as expected by the installer
     - name: Check out PeekabooAV
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
       with:
         path: PeekabooAV
         # for scheduled builds, github.ref/$GITHUB_REF is always latest commit
@@ -135,17 +135,17 @@ runs:
     # https://github.com/sigstore/cosign-installer
     - name: Install cosign
       if: inputs.event != 'pull_request'
-      uses: sigstore/cosign-installer@v2.3.0
+      uses: sigstore/cosign-installer@v3.7.0
 
     # Workaround: https://github.com/docker/build-push-action/issues/461
     - name: Setup Docker buildx
-      uses: docker/setup-buildx-action@v2
+      uses: docker/setup-buildx-action@v3
 
     # Login against a Docker registry except on PR
     # https://github.com/docker/login-action
     - name: Log into registry ${{ inputs.registry }}
       if: inputs.event != 'pull_request'
-      uses: docker/login-action@v2
+      uses: docker/login-action@v3
       with:
         registry: ${{ inputs.registry }}
         username: ${{ inputs.registry_username }}
@@ -206,7 +206,7 @@ runs:
     # https://github.com/docker/build-push-action
     - name: Build and push Docker image
       id: build-and-push
-      uses: docker/build-push-action@v3
+      uses: docker/build-push-action@v6.12.0
       with:
         context: .
         push: ${{ inputs.event != 'pull_request' }}