Signed-off-by: Caleb Xu <caxu@redhat.com>

Signed-off-by: Caleb Xu <caxu@redhat.com>

Signed-off-by: Caleb Xu <caxu@redhat.com>

As pointed out in [1], skopeo is already provided inside the VM
in which GitHub Actions are executed.

[1]: https://github.com/actions/runner-images/blob/main/images/ubuntu/Ubuntu2404-Readme.md

Signed-off-by: Caleb Xu <caxu@redhat.com>

Signed-off-by: Caleb Xu <caxu@redhat.com>

Bumps the prod-dependencies group with 3 updates: [github.com/docker/cli](https://github.com/docker/cli), [github.com/operator-framework/operator-manifest-tools](https://github.com/operator-framework/operator-manifest-tools) and [sigs.k8s.io/yaml](https://github.com/kubernetes-sigs/yaml).


Updates `github.com/docker/cli` from 28.2.2+incompatible to 28.3.0+incompatible
- [Commits](docker/cli@v28.2.2...v28.3.0)

Updates `github.com/operator-framework/operator-manifest-tools` from 0.9.0 to 0.10.0
- [Release notes](https://github.com/operator-framework/operator-manifest-tools/releases)
- [Changelog](https://github.com/operator-framework/operator-manifest-tools/blob/main/.goreleaser.yml)
- [Commits](operator-framework/operator-manifest-tools@v0.9.0...v0.10.0)

Updates `sigs.k8s.io/yaml` from 1.4.0 to 1.5.0
- [Release notes](https://github.com/kubernetes-sigs/yaml/releases)
- [Changelog](https://github.com/kubernetes-sigs/yaml/blob/master/RELEASE.md)
- [Commits](kubernetes-sigs/yaml@v1.4.0...v1.5.0)

---
updated-dependencies:
- dependency-name: github.com/docker/cli
  dependency-version: 28.3.0+incompatible
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: github.com/operator-framework/operator-manifest-tools
  dependency-version: 0.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: sigs.k8s.io/yaml
  dependency-version: 1.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>

Bumps the prod-dependencies group with 1 update: [github.com/docker/cli](https://github.com/docker/cli).


Updates `github.com/docker/cli` from 28.3.1+incompatible to 28.3.2+incompatible
- [Commits](docker/cli@v28.3.1...v28.3.2)

---
updated-dependencies:
- dependency-name: github.com/docker/cli
  dependency-version: 28.3.2+incompatible
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: Adam D. Cornett <adc@redhat.com>

Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 3.9.1 to 3.9.2.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](sigstore/cosign-installer@398d4b0...d58896d)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-version: 3.9.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: Caleb Xu <caxu@redhat.com>

For extra inception points, Gemini was utilized in the creation of this
workflow.

Signed-off-by: Brad P. Crochet <brad@redhat.com>

The code review workflow was failing on pull requests from forks
because it was not checking out the correct ref. This change
modifies the checkout step to fetch the PR's merge ref, which
will allow the workflow to access the PR's code.

Signed-off-by: Brad P. Crochet <brad@redhat.com>
Assisted-by: Gemini

Signed-off-by: Adam D. Cornett <adc@redhat.com>

Signed-off-by: Adam D. Cornett <adc@redhat.com>

Signed-off-by: Adam D. Cornett <adc@redhat.com>

Bumps the prod-dependencies group with 8 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/docker/cli](https://github.com/docker/cli) | `28.3.2+incompatible` | `28.3.3+incompatible` |
| [github.com/onsi/gomega](https://github.com/onsi/gomega) | `1.37.0` | `1.38.0` |
| [github.com/operator-framework/api](https://github.com/operator-framework/api) | `0.32.0` | `0.33.0` |
| [github.com/spf13/pflag](https://github.com/spf13/pflag) | `1.0.6` | `1.0.7` |
| [k8s.io/api](https://github.com/kubernetes/api) | `0.33.2` | `0.33.3` |
| [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) | `0.33.2` | `0.33.3` |
| [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.33.2` | `0.33.3` |
| [sigs.k8s.io/yaml](https://github.com/kubernetes-sigs/yaml) | `1.5.0` | `1.6.0` |


Updates `github.com/docker/cli` from 28.3.2+incompatible to 28.3.3+incompatible
- [Commits](docker/cli@v28.3.2...v28.3.3)

Updates `github.com/onsi/gomega` from 1.37.0 to 1.38.0
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](onsi/gomega@v1.37.0...v1.38.0)

Updates `github.com/operator-framework/api` from 0.32.0 to 0.33.0
- [Release notes](https://github.com/operator-framework/api/releases)
- [Changelog](https://github.com/operator-framework/api/blob/master/RELEASE.md)
- [Commits](operator-framework/api@v0.32.0...v0.33.0)

Updates `github.com/spf13/pflag` from 1.0.6 to 1.0.7
- [Release notes](https://github.com/spf13/pflag/releases)
- [Commits](spf13/pflag@v1.0.6...v1.0.7)

Updates `k8s.io/api` from 0.33.2 to 0.33.3
- [Commits](kubernetes/api@v0.33.2...v0.33.3)

Updates `k8s.io/apimachinery` from 0.33.2 to 0.33.3
- [Commits](kubernetes/apimachinery@v0.33.2...v0.33.3)

Updates `k8s.io/client-go` from 0.33.2 to 0.33.3
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.33.2...v0.33.3)

Updates `sigs.k8s.io/yaml` from 1.5.0 to 1.6.0
- [Release notes](https://github.com/kubernetes-sigs/yaml/releases)
- [Changelog](https://github.com/kubernetes-sigs/yaml/blob/master/RELEASE.md)
- [Commits](kubernetes-sigs/yaml@v1.5.0...v1.6.0)

---
updated-dependencies:
- dependency-name: github.com/docker/cli
  dependency-version: 28.3.3+incompatible
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
- dependency-name: github.com/onsi/gomega
  dependency-version: 1.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: github.com/operator-framework/api
  dependency-version: 0.33.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: github.com/spf13/pflag
  dependency-version: 1.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
- dependency-name: k8s.io/api
  dependency-version: 0.33.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.33.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
- dependency-name: k8s.io/client-go
  dependency-version: 0.33.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
- dependency-name: sigs.k8s.io/yaml
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: Caleb Xu <caxu@redhat.com>