From 8d810c98c2c310dc4cc7ba7f2c1a07e82a25086a Mon Sep 17 00:00:00 2001
From: "mergeraptor[bot]" <267480593+mergeraptor[bot]@users.noreply.github.com>
Date: Tue, 27 Oct 2026 18:19:53 +0000
Subject: [PATCH] chore(deps): update oras-project/setup-oras action to v2.0.3

---
 .github/workflows/registry-actions.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/registry-actions.yml b/.github/workflows/registry-actions.yml
index 9ccfb80..95598a7 100644
--- a/.github/workflows/registry-actions.yml
+++ b/.github/workflows/registry-actions.yml
@@ -210,7 +210,7 @@ jobs:
       - name: Install Cosign
         uses: sigstore/cosign-installer@6f9f17788090df1f26f669e9d70d6ae9567deba6 # v4.1.2
       - name: Install ORAS
-        uses: oras-project/setup-oras@005458ad77f1c8facd38a094e4af2e69e5607ff4 # v2.0.2
+        uses: oras-project/setup-oras@5e2f2482b30b0cb3e14e67f89a80c88c659a7c63 # v2.0.3
       - name: Generate BuildStream-native SPDX SBOM
         run: just sbom
       # Everything is pushed, signed, attested and verified by digest; the